Meet global buyer requirements and pass RBA and SMETA audits with confidence. We help Malaysian employers achieve full compliance with the Responsible Business Alliance Code of Conduct v8.0 — labour standards, foreign worker protection, and ethical supply chain practices.
The Responsible Business Alliance (RBA) — formerly the Electronic Industry Citizenship Coalition — is the world's largest industry coalition for corporate social responsibility in global supply chains. Its member companies span electronics, retail, automotive, and manufacturing.
In Malaysia — a major hub for electronics manufacturing and EMS — RBA compliance is a contractual and commercial prerequisite for supplying global brands. Malaysian facilities are typically assessed through the RBA Validated Audit Process (VAP) or SMETA (Sedex Members Ethical Trade Audit) — many customers accept either framework.
RBA CoC compliance is not a Malaysian statutory requirement, but it's embedded in supplier contracts. Non-compliance triggers audit failures, corrective action plans, business suspension, and contract termination.
The Responsible Business Alliance, headquartered in Washington D.C., with global audit programmes managed through EICC-ON and the Validated Audit Process (VAP).
RBA CoC compliance is embedded in supplier contracts and purchase orders — non-compliance affects business continuity, not government prosecution.
Non-conformances are graded by severity. A single Priority Non-Conformance can suspend all business with a customer immediately.
A single PNC can result in immediate business suspension. Priority issues include:
| Classification | Definition | Typical Customer Response |
|---|---|---|
| Priority Non-Conformance (PNC) | Immediate, serious risk to worker health, safety, or fundamental rights | Business suspension or shipment hold; full closure required before reinstatement |
| Major Non-Conformance | Systemic failure or repeated minor findings | Corrective Action Plan (CAP) required within 30–90 days |
| Minor Non-Conformance | Isolated, partial failure without systemic breakdown | CAP submission; closure verified at next audit cycle |
| Observation | Potential risk or emerging gap, not yet a violation | Documented for continuous improvement |
Each pillar contains specific standards that Malaysian facilities must implement and demonstrate during audits.
Freely chosen employment, young worker protection, working hours (max 60 hrs/week), wages & benefits, humane treatment, non-discrimination, freedom of association.
Occupational safety, emergency preparedness, industrial hygiene, machine safeguarding, and dormitory & canteen standards.
Environmental permits, pollution prevention, hazardous substances, solid waste, air emissions, energy & water conservation.
Business integrity, anti-bribery, disclosure of information, intellectual property, responsible minerals sourcing, privacy protection.
Company commitment, management accountability, legal & customer requirements, risk identification, training, worker feedback, internal audits, corrective action processes, documentation, and supplier responsibility — the infrastructure that makes the other four pillars sustainable rather than one-off.
Where local law and RBA requirements differ, facilities must meet whichever standard is more protective of workers. In practice, RBA routinely exceeds Malaysian legal minimums.
| Topic | RBA CoC v8.0 Requirement | Malaysian Local Standard |
|---|---|---|
| Recruitment fees | Zero fees to workers; employer must verify & reimburse (Employer Pays Principle) | Employment Act 1955 restricts deductions but doesn't mandate overseas reimbursement |
| Weekly working hours | Max 60 hrs/week including overtime, 1 rest day in 7 | Up to ~74 hrs/week in practice (48 regular + 104 OT/month) |
| Dormitory freedom of movement | No curfews or lockdowns during non-working hours | Not explicitly regulated under Act 446 |
| CCTV in private areas | Strictly prohibited in sleeping areas, bathrooms, changing rooms | PDPA 2010 doesn't explicitly prohibit this |
| Supplier flow-down | Tier 1 suppliers must acknowledge and comply with RBA CoC | No statutory equivalent |
Typical RBA VAP duration: 1–3 days on-site depending on facility size.
Log in to EICC-ON and complete the current SAQ. Use gaps found to prioritise internal improvement ahead of audit.
Systematic internal gap analysis across all five CoC pillars, ideally with an experienced third-party consultant.
12 months of payroll, working hours data, training records, safety incident logs, environmental reports, and dormitory registers.
Workers must understand they may be interviewed confidentially and aren't required to seek permission to speak freely with auditors.
Prioritise PNCs for immediate closure, assign owners and deadlines, and submit CAP within the customer-specified deadline — typically 30 days.
Gap assessments, risk analysis, documentation review, worker interview preparation, and corrective action planning — book a confidential consultation.