What the New Zealand test found
On 30 October 2026 Consumer NZ reported a test of ten widely available sunscreens. Only 3 of the 10 met their SPF claims. One labelled SPF50 measured SPF14.
The same release carried good news that travels less well. Every product met the requirements for broad-spectrum protection based on the SPF it reached, and six still offered high protection, SPF 30 or higher. CHOICE in Australia said the sunscreens "still achieve a high level of protection". It also said that of the tested sunscreens also available in Australia, 6 of 7 failed to meet their SPF claims.
Consumer NZ added a detail that explains how a label can drift from the product: previous investigations have found some companies rely on test reports that are several years old. This article names none of the products.
Who checks the SPF on a Malaysian sunscreen?
The company does first. In Malaysia a sunscreen is a cosmetic, and NPRA's guideline says cosmetics are controlled through a notification procedure. The guideline is adapted from the ASEAN Cosmetic Directive, and it requires the notification holder, the company responsible for placing the product on the market, to "make a declaration upon notification". Regulatory action is taken in the event of a false declaration or a product found non-compliant.
Behind the declaration sits a file. The notification holder must keep a product information file, including information on quality, safety and claimed benefit, available and accessible to NPRA on request. For sunscreens, NPRA's Annex I part 9(i) says the SPF value "must be substantiated with SPF value testing to determine the true value", by in-vivo testing on the finished product under a listed standard such as ISO 24444 or AS/NZS 2604:2012. So the rule asks for a real test. The company holds the result, and the notification is the company's declaration that it has one.
NPRA does have a market check. Its guideline lists post market surveillance, including sample collection and testing, monitoring of label compliance and audit of the product information file, and says NPRA may take a sample from the market to check quality and label compliance. The pages read for this article do not say how many sunscreens are sampled or whether the SPF is among the things measured, so neither can be stated here.
As for a Malaysian test of sunscreen labels like the New Zealand one, none was found when this article was written. That is not evidence that Malaysian sunscreens match or miss their labels. No result either way was found.
What a notification number can and cannot tell you
A cosmetic sold in Malaysia should carry a notification number. It begins with NOT, then the year and month, then a serial number, and ends in K. People who search for a sunscreen that is "lulus KKM" are looking for this number, because a cosmetic is notified to NPRA and carries a number rather than an approval. The steps for searching it, and for the cases where a cream is not what it claims, are in how to check whether a cream, injection or slimming pen is KKM approved.
The check itself is the NPRA QUEST3+ product search. Enter the number or the product name. A product with no number on the label, or a number that returns nothing, is unverified. A number that returns a listing tells you the product was notified. It does not tell you what SPF the product reaches on skin. The pages read do not describe a way for a shopper to see the test report.
Does the last digit matter as much as how you apply it?
It matters, and a gap as wide as SPF50 against SPF14 is a real problem. The complication is that the number on the bottle is measured under conditions few people reproduce. A 2014 literature review by Petersen and Wulf reports that SPF is tested at 2 mg per square centimetre of skin, while studies of real use find about 0.39 to 1.0 mg, which, in the authors' words, decreases the protection factor considerably. The same review says early reapplication, or a very high SPF, may partly compensate, and suggests a simple habit: apply before sun exposure and reapply once within an hour.
NPRA's own sunscreen guideline points the same way. No label may imply that reapplication is unnecessary, and the guideline strongly recommends telling users to re-apply frequently and how much to apply. How much to use, and the usual two-hour rhythm, are set out in sunscreen in a tropical climate and what the SPF number leaves out.
Questions about whether sunscreen ingredients are safe are a separate matter, and the trials behind the loudest claims are checked in is sunscreen bad for you, the anti-sunscreen claims checked.
What to take from it
Read the SPF and the broad-spectrum claim on the label, find the notification number and search it. Then use enough, and reapply. Both testers said the sunscreens in the test still gave real protection. The review above finds that a thin layer lowers protection considerably, and that is a part of the label you control.
A number on a bottle is a claim. It helps to know who holds the evidence for it.
