Workplace Accident Reporting & Incident Investigation in Malaysia

Something has gone wrong on your site. Someone is hurt. In the middle of that, you have legal duties with clocks attached — and most employers only find out what they were afterwards.

This guide covers both halves: what you must report, and how to investigate properly so it does not repeat.

The law: Section 32 and NADOPOD

Section 32 of OSHA 1994 requires an employer to notify the nearest DOSH office of any accident, dangerous occurrence, occupational poisoning or occupational disease that has occurred — or is likely to occur — at the workplace.

The detail sits in the Occupational Safety and Health (Notification of Accident, Dangerous Occurrence, Occupational Poisoning and Occupational Disease) Regulations 2004 — universally called NADOPOD. It was gazetted in 2004 and enforced from 1 March 2005, and it was modelled on the UK's RIDDOR system. Importantly, NADOPOD applies to all places of work.

The forms

• JKKP 6 — notification of an accident or dangerous occurrence. This is the one most employers need.
• JKKP 7 — notification of occupational poisoning or occupational disease. Registered medical practitioners must report notifiable diseases to the Director General within 7 days using this form.
• JKKP 8 — the register of accidents, maintained internally.
• JKKP 9 and JKKP 10 — supporting forms used for classification and coding.

All forms are available from the DOSH website (dosh.gov.my) or any state office, and employers may reproduce them.

The JKKP 8 register — the one people forget

JKKP 8 is not a one-time submission. It is a running register that records incidents across the calendar year. An annual extract must be submitted to the Director General of DOSH, and the register must be kept on the premises for at least five years.

This is a common audit finding: the employer reported the serious accident correctly, but never maintained the register or submitted the annual extract.

Who reports?

The duty falls on the employer and the self-employed. Where contractors are involved, this trips people up: the immediate employer — the contractor — should also submit their own report. The principal's reporting does not relieve the contractor of that duty.

One more that catches people out: if an injured worker dies within a year of the incident, the employer must notify the Director General in writing as soon as possible — even though the original accident was reported long before.

Penalties

Failing to comply with NADOPOD is an offence, carrying a fine or imprisonment for a term not exceeding one year, or both. But the real cost is usually elsewhere: a business that cannot show it reported and investigated properly is in a far worse position when the investigation, the insurer and the lawyers arrive.

Investigating properly: past the easy answer

Reporting satisfies the law. Investigation is what stops the next one. The difference between a useless investigation and a useful one is where you stop asking why.

A useless investigation concludes: "The worker did not use the machine guard." Case closed, worker warned, everyone moves on — and it happens again in eight months.

A proper root cause analysis keeps going:

• Why was the guard not used? It slowed the job down.
• Why did that matter? The line had an output target that assumed no guard.
• Why was that target set? It was based on a timing done before the guard was fitted.
• Why did nobody catch it? Supervisors were measured on output, not on safe method.

Now you have something you can actually fix. The worker was the last link in a chain, not the cause of it.

A workable investigation sequence

1. Make it safe. Care for the injured person; secure the scene; stop the work if the hazard is still live.
2. Notify. Meet your NADOPOD duty — do not let this slide while you investigate.
3. Gather evidence early. Photographs, the physical scene, equipment condition, records. Scenes get cleaned up fast.
4. Interview witnesses separately and soon — memory fades and converges. Ask what happened, not who is at fault.
5. Build a timeline of what actually happened, minute by minute.
6. Find the root causes — usually several, usually systemic.
7. Set corrective actions with an owner and a date, and prefer controls high in the hierarchy over "retrain the worker".
8. Update your HIRARC — an incident is proof your risk assessment missed something.
9. Verify it worked. Go back in three months and check.

Don't waste your near misses

A near miss is a free lesson — the same failure, without the injury. Businesses that investigate near misses with the same seriousness as accidents have fewer accidents. Businesses that punish people for reporting them simply stop hearing about them, which is not the same as not having them.

How ProSafe helps

ProSafe HSE Consultancy conducts independent incident investigations, helps you meet your NADOPOD obligations correctly, and trains your team to investigate without defaulting to blame. Independence matters here — it is hard to investigate your own system objectively when the answer might be uncomfortable.