Palm Oil Sustainability and Certification in Malaysia

A single Malaysian palm oil shipment now has to answer to three different rulebooks at once: a mandatory national scheme at home, a voluntary buyers’ club in the boardroom, and a European deforestation law that can bar it at the port. For an industry that shipped 22.30 million tonnes of palm oil and palm-based products in the first ten months of 2024 alone — earning RM89.39 billion — the paperwork is no longer a formality. It is market access.

Who actually certifies Malaysian palm oil?

Two schemes dominate, and they are not the same kind of thing.

MSPO (Malaysian Sustainable Palm Oil) is the government’s scheme. It is owned by the state and administered by the Malaysian Palm Oil Certification Council (MPOCC), an independent non-profit set up in 2014 to run it. Crucially, MSPO is mandatory. The government declared it compulsory in 2017 and phased it in — RSPO-certified operators first, then everyone else — until all plantations, organised and independent smallholders, and mills were required to comply by the end of 2019.

RSPO (Roundtable on Sustainable Palm Oil) is the older, voluntary standard. Formed in 2004 as a multi-stakeholder body of growers, processors, retailers, banks and NGOs, it is driven by buyers rather than governments. Its membership has grown from around 500 in 2010 to nearly 6,000 in 2024. To date, cumulative RSPO-certified sustainable palm oil production exceeds 15 million tonnes — around 20% of global crude palm oil production. Europe remains its biggest pull market.

The practical distinction: a Malaysian grower must hold MSPO to operate legally, but chooses RSPO to reach premium and European buyers. Many large producers hold both.

What does the MSPO standard require?

MSPO is built on the Malaysian Standard MS 2530, now in its revised MS 2530:2022 edition, which replaced the original 2013 version. The revision tightened requirements as the industry matured.

The revised standard is organised around five principles (down from seven), covering management commitment, transparency, legal compliance, social responsibility and worker welfare, environmental protection and biodiversity, and responsible development of new plantings. It is split into eight parts so the rules scale to the operator:

• Part 1 — general principles (framework)
• Part 2-1 — independent smallholders (individual farmers owning or leasing less than 40.46 hectares / 100 acres)
• Part 2-2 — organised smallholders under 40.46 hectares (schemes managed by agencies such as FELDA and RISDA)
• Part 3-1 — small estates (40.46 ha to 500 ha)
• Part 3-2 — large estates (more than 500 ha)
• Parts 4-1 to 4-3 — palm oil mills, processing facilities, and FFB dealers and traders

Smallholders matter enormously here. They account for about 26% of Malaysia’s oil palm planted area in 2024 — 14.6% independent and 11.8% organised smallholders (settlers under agencies such as FELDA, FELCRA and RISDA), against 73.6% held by private and government-agency estates (MPOB). That is why the standard carves out lighter-touch parts (2-1 and 2-2) specifically for them.

How do the three regimes compare?

Regime	Type	Owner / authority	Applies to	Key trigger
MSPO (MS 2530:2022)	Mandatory national scheme	MPOCC (government-owned)	All Malaysian growers, smallholders, mills	Legal requirement to operate
RSPO	Voluntary global standard	Roundtable on Sustainable Palm Oil	Members / supply chains that opt in	Buyer and market demand
EU Deforestation Regulation (EUDR)	Mandatory import law	European Union	Anyone placing covered goods on the EU market	Deforestation-free proof after 31 Dec 2020

The first two are supply-side — they certify how oil is grown. The third is demand-side — it decides whether the oil can be sold into a market at all.

What does the EU Deforestation Regulation demand?

The EUDR is the rule reshaping the trade. It bars palm oil — along with cattle, cocoa, coffee, rubber, soy and wood — from the EU market unless the operator can prove the product is deforestation-free and legally produced. “Deforestation-free” has a hard cut-off written into Regulation (EU) 2023/1115: the land must not have been cleared of forest after 31 December 2020.

Compliance is not a certificate you buy. Operators must file a due-diligence statement and, in the standard case, supply plot-level geolocation coordinates tracing the oil to the exact land it came from. This is why certification schemes help but do not substitute — MSPO’s traceability data feeds the due-diligence file, but the legal obligation sits with the operator placing goods on the market.

The timeline has slipped twice. Originally due to apply from end-2024, it was pushed to end-2025 and then delayed again. As it stands, per the European Commission:

• Large and medium operators: from 30 December 2026
• Micro and small enterprises: from 30 June 2027

Malaysia, the world’s second-largest palm oil producer, has treated the extra time as a runway rather than a reprieve, positioning MSPO’s traceability system as its EUDR answer.

What happened with the US forced-labour ban?

Before deforestation, the pressure came from labour. US Customs and Border Protection (CBP) uses Withhold Release Orders (WROs) — import bans triggered by suspected forced labour — and two of them hit major Malaysian producers.

CBP first issued a WRO against FGV Holdings Berhad, its subsidiaries and joint ventures on 30 September 2020, over palm oil produced with forced labour. Three months later, on 30 December 2020, CBP issued a WRO against Sime Darby Plantation — this one based on information reasonably indicating the presence of all 11 of the International Labour Organization’s forced-labour indicators in its production process. CBP escalated the Sime Darby order to a formal Finding on 28 January 2022, exposing shipments to seizure. The company overhauled its labour practices, and on 3 February 2023 CBP concluded it no longer used forced labour and lifted the order — just over two years after the ban began.

The case showed how quickly a labour allegation could shut a producer out of a major market, and pushed the wider industry toward auditable worker-welfare records — exactly the ground MS 2530:2022 strengthened.

Why does all of this matter to a buyer or exporter?

Because the risk has moved from the plantation to the paperwork. A grower can farm responsibly and still lose a shipment for lacking geolocation data, a valid MSPO certificate, or a defensible labour audit trail. The three regimes reward the same underlying behaviour — transparency and traceability — but they check it in different ways, at different points in the chain, with different consequences for failing.

For most Malaysian exporters the working answer is layered: MSPO as the legal baseline, RSPO where buyers pay for it, and EUDR-grade traceability data laid over both for the European market.

What’s next

• Watch the EUDR clock. The 30 December 2026 date for large and medium operators is the one that bites; smaller exporters have until 30 June 2027. Confirm which category you fall into and whether your MSPO traceability data can be exported as plot-level geolocation.
• Confirm you are on MS 2530:2022. New applications and recertifications are assessed against the revised standard, not the 2013 version — check your certificate edition and audit cycle with your certification body.
• Verify a producer’s status directly. For MSPO, check MPOCC’s public certification records; for RSPO, use the RSPO member and certification database rather than relying on a supplier’s word.
• Treat labour compliance as trade compliance. The US WRO episode shows that worker-welfare documentation is now a market-access issue, not just an HR one.