Boss Boleh | Registering a Telehealth or Digital Health Startup in Malaysia: Sdn Bhd Structure and MOH Licensing Basics

A telehealth or digital health startup in Malaysia must be incorporated as a private limited company (Sdn Bhd) through the Suruhanjaya Syarikat Malaysia (SSM), and separately meet the Ministry of Health’s (MOH) 2025 Guideline on Online Healthcare Services before it can legally offer services to patients. These are two different approval processes run by two different authorities. Getting the company structure wrong, or treating MOH licensing as an afterthought, commonly causes digital health founders to spend extra months navigating paperwork before they see a single patient.

🔔 TL;DR

You need a Sdn Bhd, not a sole proprietorship, to run a telehealth platform legally and to meet MOH’s company registration requirement.
MOH requires platform providers to maintain a physical local office and have at least one registered medical practitioner on the board or senior management.
SSM incorporation is generally fast (as little as 2 days with Boss Boleh); MOH and Malaysian Medical Council (MMC) clearance take longer and depend on your service model.
To hire foreign staff, the Expatriate Services Division generally expects RM500,000 paid-up capital from a 100% foreign-owned company (RM250,000 if 100% locally owned).
Health data is “sensitive personal data” under the Personal Data Protection Act 2010 (PDPA) and generally needs explicit consent, separate from your SSM and MOH paperwork.

About the Author:

This article is written by Boss Boleh, an online company secretary that has incorporated Sdn Bhd companies for founders across tech, medical and professional-services sectors in Malaysia, including dental and aesthetic clinic owners navigating licensing alongside company formation.

📌 Why does a telehealth startup need a Sdn Bhd instead of a sole proprietorship?

A sole proprietorship is a business registered under one person’s name, with no legal separation between the owner and the business. A Sdn Bhd (Sendirian Berhad, meaning “private limited”) is a separate legal entity under the Companies Act 2016, which can own assets, sign contracts, and be held liable in its own name. For telehealth specifically, this distinction is not optional. MOH’s 2025 Guideline on Online Healthcare Services requires platform providers to be registered companies in Malaysia, which rules out operating as an individual under a business name.

There’s a liability reason too. A telehealth platform handles patient consultations, prescriptions, and health records. If something goes wrong, for example a misdiagnosis linked to a platform defect, a Sdn Bhd structure means the company, not the founder’s personal assets, carries first-line exposure. That’s a meaningfully different risk position than a sole proprietorship, where the owner and the business are legally the same person.

📌 What does SSM require to register a telehealth Sdn Bhd in Malaysia?

SSM company registration for a telehealth business follows the same core steps as any other Sdn Bhd, with a few sector-specific points to watch. You’ll need to:

Run an SSM name search Malaysia check to confirm your proposed company name is available and not misleading (for example, avoid implying you’re a hospital or government health body when you’re not).
Appoint at least one director who is ordinarily resident in Malaysia, and at least one shareholder.
Submit incorporation documents through SSM’s online portal.
Appoint a qualified company secretary within 30 days of incorporation, as required by the Companies Act 2016 [Section 236].

The standard SSM registration process typically takes up to five working days once all documents are submitted. Boss Boleh’s own incorporation service can complete the SSM registration step in 2 working days, which is faster than the general timeline, though MOH and MMC-related clearances afterward will still take their own time separately.

📌 What does MOH actually require before you can operate?

Having a Sdn Bhd gets you registered as a company. It does not, by itself, let you operate a telehealth platform. MOH’s 2025 Guideline on Online Healthcare Services sets three core requirements for platform providers [MOH Guideline on Online Healthcare Services 2025, Part 4]:

Company registration in Malaysia, meaning your Sdn Bhd must already exist before you can apply.
A physical local office, so the platform has a real, inspectable Malaysian address, not just a website and a server.
At least one registered medical practitioner on the board or in senior management, to make sure clinical judgment sits somewhere inside the organisation’s decision-making, not only with contracted doctors on the app.

If your founding team is entirely technical or business background, you’ll need to either bring on a doctor as a co-founder or director, or hire one into a senior role, before MOH licensing is realistic.

📌 Who else regulates telehealth in Malaysia, besides MOH?

MOH is not the only authority in the picture. The full regulatory framework for telehealth in Malaysia sits across three layers:

Authority	What it governs	Why it matters to you
SSM	Company incorporation and corporate compliance	You need a Sdn Bhd with a qualified company secretary and ongoing Annual Return and Beneficial Owner filings
MOH	2025 Guideline on Online Healthcare Services	Governs the platform itself: company registration, physical office, medical practitioner on the board
Malaysian Medical Council (MMC)	2024 Guideline on Telemedicine; Annual Practising Certificates	Governs the doctors delivering care, both local and foreign
Personal Data Protection Act 2010 (PDPA)	Patient data handling	Health data is sensitive personal data, generally requiring explicit patient consent

Think of it like building a restaurant. SSM registration is like getting your business licence to exist as a company. MOH licensing is the health inspector checking your kitchen and staffing before you can serve food. MMC certification is the chef’s individual culinary qualification. You need all three functioning together, not just one.

📌 What qualifications do the doctors on your platform need?

Every practitioner providing consultations through your platform must be a fully registered medical professional holding a valid Annual Practising Certificate from the MMC [Medical Act 1971, Section 20]. This applies whether they’re a full-time hire, a contracted locum, or a co-founder.

Foreign doctors need special attention here. The MMC’s telemedicine guideline says doctors outside Malaysia who provide telemedicine to patients in Malaysia must meet the same ethical, legal and statutory requirements as a registered medical practitioner in Malaysia, including professional indemnity cover [MMC Guideline on Telemedicine, paragraph 10]. There is no separate “telemedicine-only” certificate to fall back on. If you’re building a platform that connects Malaysian patients with doctors based overseas, confirm each doctor’s registration with MMC early, because it directly affects how you structure your service and your board.

📌 Are there capital requirements or insurance rules specific to telehealth?

Any Sdn Bhd, telehealth or not, can be incorporated with a nominal paid-up capital. The bigger numbers come in when you want to hire foreign staff: before a company can register with the Expatriate Services Division to sponsor Employment Passes, it generally needs paid-up capital of RM250,000 if 100% locally owned, RM350,000 for a joint venture, or RM500,000 if 100% foreign-owned.

On insurance, the MOH guideline does not place an insurance requirement on the platform operator itself. The doctors are a different story: each one must show evidence of professional indemnity cover to get their Annual Practising Certificate [Medical Act 1971, Section 20]. Many platforms also carry their own professional indemnity or cyber-liability cover, given the sensitivity of health data and the clinical nature of the service, but for the platform that is a business decision rather than a regulatory one.

📌 How does patient data consent work under Malaysian law?

The Personal Data Protection Act 2010 (PDPA) classifies information about a person’s physical or mental health as sensitive personal data [PDPA, Section 4]. Processing it generally requires the patient’s explicit consent, with limited exceptions such as processing for medical purposes by a healthcare professional [PDPA, Section 40]. This is a separate compliance track from your SSM and MOH paperwork, and it needs to be built into your onboarding flow and consultation records from day one, not retrofitted after launch.

📌 Frequently Asked Questions

Can I start a telehealth platform as a sole proprietorship first and convert later?

MOH’s guideline requires platform providers to be registered companies, so a sole proprietorship won’t satisfy that requirement from the start. It’s more practical to register a Sdn Bhd from day one.

Do I need a doctor as a company director, or can they just be an employee?

MOH requires a registered medical practitioner on the board or in senior management, so a senior employment role can satisfy this, not only a director appointment, but your governance structure should make the clinical authority clear.

How long does the whole process take, from incorporation to being MOH-licensed?

SSM registration itself typically takes up to five working days through standard channels (2 days with Boss Boleh). MOH and MMC clearances run on their own timelines depending on your service model and documentation completeness.

Does the SSM audit exemption 2026 apply to telehealth startups?

Yes, the same rules apply as any other Sdn Bhd. If your company stays within at least two of SSM’s three limits (revenue, total assets and number of employees) in the current and the previous two financial years, you can file Unaudited Financial Statements through MBRS instead of a full audit. The revenue and asset limits are RM1 million each for financial years starting in 2025, RM2 million for 2026 and RM3 million from 2027, with employee limits of 10, 20 and 30 [SSM Practice Directive 10/2024].

Can a foreign doctor consult Malaysian patients remotely without an MMC certificate?

Generally no. The MMC expects doctors outside Malaysia who treat patients in Malaysia online to meet the same ethical, legal and statutory requirements as a registered medical practitioner in Malaysia, including professional indemnity cover. There is no separate telemedicine-only certificate.

Is private limited company Malaysia registration done fully online?

Yes. Online company incorporation platforms, including Boss Boleh, handle SSM company registration digitally, including name search, document signing, and submission, without needing to visit a government counter.

ABOUT BOSS BOLEH

Boss Boleh is an online company secretary and incorporation platform built for first-time entrepreneurs and digital health founders setting up their Sdn Bhd. Beyond company secretarial work, it also offers a one-stop compliance solution for entrepreneurs, including accounting, tax planning and tax filing services. For telehealth founders, this means handling SSM name search, incorporation, and the qualified company secretary appointment quickly, so you can focus your time on MOH licensing, MMC certification and clinical staffing. With over 1,500 Google reviews at a 4.9-star average, Boss Boleh supports clients in Kuala Lumpur, across every other Malaysian state, and Malaysians living overseas.