Local payroll and social security compliance in Malaysia

Malaysia lies outside any coordination arrangement with Europe, but its social architecture is clear and well documented. Three funds share responsibility for contributions: the Kumpulan Wang Simpanan Pekerja (KWSP, or EPF, the employees provident fund), the Pertubuhan Keselamatan Sosial (PERKESO, or SOCSO, the social security organisation) and the employment insurance scheme. Each has its own registration and its own timetable.

Wages are denominated in ringgit. Malay is the official language and the language of administrative documents, but English is standard in business, accounting and employment contracts, which gives a foreign company real practical comfort.

Running payroll for a third party requires no licence. Two adjacent restrictions apply: the accountant title and public practice are reserved to members of the Malaysian Institute of Accountants (MIA), and filing tax returns on behalf of others requires the tax agent licence granted by the Ministry of Finance on the recommendation of the revenue board.

Immigration is a structuring issue that governs the whole hiring calendar: depending on role and pay level, the employee falls into a different pass category, and the employer often has to obtain prior approval to employ foreign labour. That timetable governs the start date.

The employer registers with the revenue board, with KWSP and with PERKESO. These are separate steps run in parallel; for a foreign employee, fund affiliation follows particular rules that should be confirmed rather than inferred.

Employing in Malaysia in practice means a local company registered with the Suruhanjaya Syarikat Malaysia (SSM, the companies commission). Direct employment from abroad quickly runs into the fund affiliation obligations, which presuppose a locally registered employer.

A written contract is required for employees covered by the employment legislation, with prescribed minimum particulars. An itemised payslip and the keeping of records are also mandatory.

Wage tax is deducted monthly by the employer and supplemented by annual statements given to the employee and to the revenue board. Contributions to the three funds each follow their own monthly cycle.

Plan, when a foreign employee leaves, for the departure filing, and for the termination benefits due to those employees who are covered by the dedicated regulations. Both items should be costed before the hire rather than discovered at the end.

The first Malaysian feature is terminological. For recently formed companies the certificate of incorporation has given way to a notice of registration; the section 17 certificate is merely a paid duplicate. Rejecting a file because it contains no Certificate of Incorporation would be a misjudgement of the local system.

The tax settlement letter, the Surat Penyelesaian Cukai, is no more the equivalent of a European compliance certificate: it marks the closing of a position rather than good standing. To assess a company's tax position, ask for the tax account statement instead.

Registration under the personal data protection legislation expressly covers accounting firms. A payroll provider handles employee data on a large scale and falls squarely within that scope, yet the obligation is frequently overlooked in application files, which makes it a useful measure of how carefully a candidate reads its own compliance duties.