CHRA Malaysia: chemical health risk assessment under the USECHH Regulations 2000

A chemical health risk assessment (CHRA) is the written assessment that regulation 9 of the OSH (Use and Standards of Exposure of Chemicals Hazardous to Health) Regulations 2000 requires before any work that may expose employees to chemicals hazardous to health. It must be done by an assessor registered with DOSH, reviewed at least every five years, and kept for 30 years.

Last reviewed 30 October 2026 · General information, not legal advice

What CHRA means in Malaysia, and which law applies

CHRA stands for chemical health risk assessment. In Malaysia it is the assessment of risk to health required by Part IV of the Occupational Safety and Health (Use and Standards of Exposure of Chemicals Hazardous to Health) Regulations 2000, usually shortened to USECHH. The Regulations were made under section 66 of the OSH Act 1994 (Act 514), published as P.U.(A) 131/2000 and came into operation on 4 April 2000.

People often ask whether USECHH has been replaced. DOSH ran a public consultation on a draft revision, referred to as the USECHH Regulations 202X, in 2020. As of October 2026 no replacement has been gazetted, and the regulations list on the DOSH website still shows the 2000 Regulations alongside the newer 2024 and 2025 instruments on fees, construction design and management, certificates of fitness and special inspection. Use the 2000 Regulations, and check the DOSH site before each CHRA review in case the revision is finalised.

USECHH applies to every place of work under the OSH Act where chemicals hazardous to health are used. “Use” is wide: production, processing, handling, storage, transport, disposal and treatment. It does not cover radioactive materials, foodstuffs, pharmaceutical products, or chemicals that are hazardous only because they are explosive, flammable, hot, cold or under pressure. Those risks belong in your general risk assessment, such as a HIRARC.

The chemical register and safety data sheets

Regulation 5 is the starting point. The employer must identify and record in a register all chemicals hazardous to health used at the place of work, keep it in good order and update it. The register must contain:

  • a list of all chemicals hazardous to health used;
  • the current safety data sheet (SDS) for each one, or for pesticides the information in Schedule III;
  • the average quantity used, produced or stored per month or per year;
  • the process and work area where each chemical is used; and
  • the name and address of each supplier.

The register must be accessible to every employee who is, or is likely to be, exposed. A register locked in the HSE office does not meet that test.

Two other rules keep the SDS useful. Under regulation 24, if a chemical arrives without a label or SDS, you must get the information from the supplier and must not use the chemical until you have it. Under regulation 25, the current SDS must be kept in a conspicuous place close to each location where the chemical is used. Labels must not be removed or defaced, and decanted containers that are not used up within a normal shift must be relabelled (regulations 20 and 21).

Where CLASS 2013 fits. The Occupational Safety and Health (Classification, Labelling and Safety Data Sheet of Hazardous Chemicals) Regulations 2013 (P.U.(A) 310/2013), known as CLASS, brought the Globally Harmonized System (GHS) into Malaysian law. CLASS puts the duty on suppliers to classify the hazardous chemicals they supply, label them and provide an SDS with all 16 sections. USECHH then puts the duty on the employer who uses them. If a supplier’s SDS is out of date or missing sections, ask for a current one before you put it in the register.

What a CHRA must cover

Regulation 9 says an employer shall not carry out any work that may expose employees to a chemical hazardous to health unless a written assessment has been made. The assessment must contain:

  1. the potential risks to employees from exposure;
  2. the methods and procedures used in handling the chemicals;
  3. the nature of the hazard to health;
  4. the degree of exposure;
  5. the risk created by the use and release of chemicals from work processes;
  6. the measures and procedures needed to control exposure;
  7. the measures, procedures and equipment needed to control accidental emissions from leaks, spills or process or equipment failure;
  8. whether an exposure monitoring programme is needed;
  9. whether a health surveillance programme is needed; and
  10. the training and retraining employees need.

The assessment is also how you show compliance with the permissible exposure limits in Schedule I. Regulations 6 and 7 require that exposure never exceeds a chemical’s ceiling limit, stays below its eight-hour time-weighted average, and never exceeds its maximum exposure limit, a 15-minute average set at three times the eight-hour value.

The Chemicals & H2S lesson lets workers practise reading SDS and GHS labels, choosing chemical PPE and decanting safely in a 3D chemical yard, which is the kind of everyday practice a CHRA usually asks for.

Who can do a CHRA: registered assessors

Regulation 11 says the employer must ensure the assessment is conducted by an assessor, defined in regulation 2 as an employee or other person appointed by the employer and registered with the Director General of DOSH to carry out assessments of risks to health.

The OSH (Amendment) Act 2022 (Act A1648) strengthened this. It inserted Part VIIA on competent persons into the OSH Act. Under section 31B, no person may carry out an activity listed in the Fifth Schedule unless registered as a competent person, on pain of a fine of up to RM100,000. The Fifth Schedule lists, among others:

  • conducting health risk assessment for any chemical that is hazardous to health;
  • carrying out medical surveillance and health examination;
  • monitoring or testing the work environment, including chemical exposure monitoring; and
  • fabricating, installing, testing, inspecting or maintaining engineering control equipment.

In practice that means three registered roles around a CHRA: the assessor who writes it, the hygiene technician who monitors exposure and tests engineering controls, and the occupational health doctor who runs medical surveillance. Check the person’s current DOSH registration before you appoint them, and keep a copy with the report.

Under regulation 12 the assessor must give you the report within one month of finishing the assessment, and must tell you immediately if anything is likely to cause immediate danger to life or property.

How the DOSH CHRA manual structures the assessment

DOSH’s Manual of Recommended Practice on Assessment of the Health Risks Arising from the Use of Chemicals Hazardous to Health at the Workplace (3rd edition, first reprint 2018, with a corrigenda issued by DOSH) is the method assessors follow. It sets out ten steps:

  1. Gather information.
  2. Divide the workplace into work units (groups of workers with similar tasks and exposures).
  3. Determine the degree of hazard of each chemical in each work unit.
  4. Evaluate exposure from all routes: inhalation, skin and ingestion.
  5. Determine the level of risk.
  6. Assess whether existing controls are adequate.
  7. Conclude the assessment.
  8. Identify the actions to be taken.
  9. Make recommendations and assign action priorities.
  10. Prepare, present and submit the report.

For inhalation, the manual scores a hazard rating (HR, 1 to 5, for the severity of health effects) and an exposure rating (ER, 1 to 5, for the chance of overexposure), and multiplies them: RR = HR × ER. A risk rating of 1 to 4 is low, 5 to 12 moderate and 15 to 25 high. Skin exposure is rated separately from the chemical’s hazardous properties, the extent of contact and its duration.

The manager’s job is to give the assessor accurate information: the chemical register, SDS, process descriptions, shift patterns, existing controls and any previous monitoring or medical results.

The 10-step CHRA (DOSH manual), simplified: Gather information, divide into work units; Rate the hazard of each chemical; Evaluate exposure: breathing, skin, mouth; Determine risk: hazard x exposure; Check existing controls are adequate; Conclude and identify actions; Set action priorities; Prepare and submit the report.

After the report: controls, monitoring and health surveillance

Act within one month. Where the report says action is needed, regulation 14 gives the employer one month from receiving it to carry out the action, and the controls must bring exposure to the lowest practicable level, and below any permissible exposure limit.

Follow the order of control. Regulation 15 lists the measures in order: elimination, substitution, total enclosure, isolation, changing process parameters, engineering control equipment, safe work systems, and approved PPE. Under regulation 16, PPE is for when the other measures are impracticable, as an interim measure, or as a top-up. Engineering control equipment must be inspected at least monthly and examined and tested by a hygiene technician at least every 12 months; local exhaust ventilation must be designed and tested by a registered professional engineer.

Exposure monitoring (regulation 26). Where the CHRA says monitoring is needed, a hygiene technician monitors exposure by an approved method. For chemicals in Schedule II, monitoring is repeated at intervals of not more than six months until the assessor is satisfied it is no longer needed.

Health surveillance (regulation 27). Where the CHRA says it is needed, the employer runs a health surveillance programme, with the medical part carried out by an occupational health doctor. For Schedule II chemicals, medical surveillance is at intervals of not more than twelve months. Under regulation 28, an employee the doctor finds at increased risk must be removed from the exposure. The Health & Wellbeing lesson shows workers what fitness-to-work and health checks are for, and Agrochemicals & Your Health walks through medical surveillance for pesticide users.

Training (regulation 22). Exposed employees must get information, instruction and training on the risks and precautions, including monitoring results and collective health surveillance results. Review and repeat the training at least once every two years, and whenever hazards, controls or tasks change.

Records to keep, and a CHRA checklist

RecordKeep for
CHRA report (regulation 13)At least 30 years
Personal exposure monitoring records (regulation 26)At least 30 years
Other monitoring recordsAt least 5 years
Health surveillance records (regulation 27)30 years from the last entry
Engineering control design, test, inspection and maintenance records (regulation 19)Produce when DOSH directs
Training programme records (regulation 22)Kept for inspection

The CHRA report must be available to DOSH and to any exposed employee on request.

  1. Build or update the chemical register, with a current SDS for every entry.
  2. Appoint a DOSH-registered assessor and confirm the registration.
  3. Give the assessor full process, shift and control information.
  4. Start the recommended actions within one month of the report.
  5. Set up exposure monitoring and health surveillance where the report requires them.
  6. Train exposed staff, and repeat at least every two years.
  7. Diary the review: five years, or sooner after any significant change.
  8. File the records for the periods in the table.

Chemical work often comes with permits; see permit to work and practise the permit steps in Permit to Work & Risk Assessment. This guide is general information, not legal advice. WorkQuest2U lessons build awareness and do not replace the registered assessor, hygiene technician or doctor the law requires.

Practise it in WorkQuest2U

Short 3D lessons where staff walk the scene, spot the issues and make the calls. Free to try, with certificates and progress records for companies.

Frequently asked questions

Has USECHH 2000 been replaced?
Not as of October 2026. DOSH consulted on a draft revision in 2020, but no replacement has been gazetted, and DOSH still lists the Occupational Safety and Health (Use and Standards of Exposure of Chemicals Hazardous to Health) Regulations 2000 as current.
How often must a CHRA be reviewed?
Regulation 10 requires a review when there has been a significant change in the work, when more than five years have passed since the last assessment, or when DOSH directs it.
Can my safety and health officer do the CHRA?
Only if they are registered with DOSH as an assessor. Regulation 11 requires the assessment to be done by a registered assessor, and conducting health risk assessment for hazardous chemicals is a Fifth Schedule activity under the OSH Act that needs competent person registration.
What is the difference between a CHRA and HIRARC?
HIRARC is a general risk assessment method mainly for physical and safety hazards. A CHRA is the specific assessment of health risks from chemicals hazardous to health that USECHH requires, done by a registered assessor following the DOSH CHRA manual.
How long must CHRA records be kept?
The CHRA report and personal exposure monitoring records for at least 30 years, health surveillance records for 30 years from the last entry, and other monitoring records for at least 5 years.
What must a chemical register contain?
A list of all chemicals hazardous to health used, the current safety data sheet for each, the average quantity used or stored, the process and work area where each is used, and each supplier’s name and address.

Sources

This guide is general information for workplaces in Malaysia, checked against the sources above on 30 October 2026. It is not legal advice; laws and guidelines change, so confirm the current text before you act.