Data protection authority governance in amendments to the Privacy and Data Protection Act 2014 (PDP Act)

On 11 September 2024, amendments to the Privacy and Data Protection Act 2014 (PDP Act) under the Justice Legislation Amendment (Integrity, Defamation and Other Matters) Bill 2024 came into force. The Information Commissioner shall be empowered to resolve privacy complaints informally if it has first conducted a preliminary inquiry and consulted with the relevant parties, and has determined that it is reasonably possible to resolve the matter informally. In the event of a resolution, the outco...

Primary legal sourceNational StrategyOfficial source · ovic.vic.gov.au ↗

09 NOV 2024 · Law / Act

Data protection authority governance in amendments to the Freedom of Information Act 1982 (FOI Act)

On 11 September 2024, amendments to the Privacy and Data Protection Act 2014 (PDP Act) under the Justice Legislation Amendment (Integrity, Defamation and Other Matters) Bill 2024 came into force. The Act introduces amendments to the obligations of agencies, particularly in relation to the access of documents and the exemptions applicable when an agency is required to consult with a third party. The Information Commissioner shall be empowered to resolve privacy complaints informally, provided ...

Primary legal sourceNational StrategyOfficial source · ovic.vic.gov.au ↗

12 MAR 2024 · Executive Order

Order amending the Malta Communications Authority Act designating competent authorities and coordinator under the Digital Service Act (Legal Notice 66 of 2024)

On 12 March 2024, the Digital Services (Designation and Enforcement) Order, 2024 was published as Legal Notice 66 of 2024 and thereby designated the Malta Communications Authority (MCA) as Malta’s Digital Services Coordinator for the purposes of Regulation (EU) 2022/2065 (Digital Services Act). The designation authorises the Malta Communications Authority to oversee the compliance of Malta-based intermediary service providers with the Digital Services Act and to facilitate cross-border cooper...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

25 OCT 2023 · International Agreement

Malta-Philippines Memorandum of Understanding on protection of personal data

On 25 October 2023, the Maltese Information and Data Protection Commissioner (IDPC) and the Philippine Privacy Commissioner signed a Memorandum of Understanding (MoU). The IPDC and the Privacy Commissioner aim to increase collaboration and cooperation between the two countries in the field of personal data protection. The IPDC and the Privacy Commissioner commit to a regular information exchange regarding their respective regulatory activity to ensure the rights and protection of the citizens...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 JAN 2022 · Other

Maltese Information and Data Protection Commissioner investigation into C-Planet regarding data breach

On 17 January 2022, the Information and Data Protection Commissioner (IDPC) issued the ruling in the investigation into C-Planet. The IDPC stated that C-Planet illegally processed personal and special categories of data, that the company did not implement appropriate technical and organisational measures to ensure data security and that the company failed to notify the IDPC of the breach. C-Planet is sanctioned to pay an administrative fine of EUR 65'000 and to erase illegally processed data.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

26 OCT 2021 · Executive Order

Data protection measures in Malta Guidelines on the processing of personal data for political campaigning purposes

The Guidelines on the processing of personal data for political campaigning purposes are updated by the Malta Information and Data Protection Commissioner. In particular, the Guidelines provide a uniform interpretation of the applicability of the General Data Protection Regulation in the political domain, especially as regards the carrying of political campaigning by political parties and candidates. The Guidelines regulate Postal and Telephony communications, Door-to-door canvassing and Elec...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

20 AUG 2021 · Policy / Guidance

Guidance Note on Cookies Consent

On 20 August 2021 the Information and Data Protection Commissioner of Malta (IDPC) adopted the guidance note on cookies requirements. The guideline aims to assist operators which make use of cookies in online services, such as websites or mobile apps. With the guidance note the IDPC aims to point out a non-exhaustive list of practices deemed non-compliant with the data protection rules, such as cookie walls, pre-ticked boxes and notices that scrolling implies constent. Additionally, an exampl...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

18 JUN 2021 · Law / Act

National Implementation of Directive (EU) 2019/790 on copyright and related rights in the Digital Single Market

The Minister for the Economy and Industry publishes the Decree that implements the provisions of the Directive (EU) 2019/790 on copyright and related rights in the Digital Single Market and amending Directives 96/9/EC and 2001/29/EC (except articles 15 and 17).

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

National Strategy

AI Innovative Technology Arrangement (AI ITA) scheme / National AI certification programme (MDIA)

AI law in Malta: The Malta Digital Innovation Authority (MDIA) established a voluntary certification and assurance pathway for Innovative Technology Arrangements (ITAs), explicitly encompassing AI, to promote trustworthy adoption through certification, sandboxing and alignment with national AI strategy goals launched in 2019. The ITAS Certification Regulations (Subsidiary Legislation 591.01) (2024) and MDIA guidance tools (AI Control Objectives, MDIA-TAS) operationalise assessment, documentation, technical administration and registration requirements for certified ITAs....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

Law / Act

227 of 2025 - Artificial Intelligence (Designation of the Information and Data Protection Commissioner for the purposes of Regulation (EU) 2024/1689) Regulations, 2025 (Legal Notice)

AI law in Malta: Legal Notice 227 of 2025 designates the Information and Data Protection Commissioner (IDPC) as Malta’s Market Surveillance Authority (MSA) for specific high‑risk AI systems listed under Annex III of Regulation (EU) 2024/1689 (the EU AI Act). The Notice sets notification and magistrate‑authorisation requirements for remote biometric identification systems and grants the Commissioner enforcement powers including administrative penalties for infringements....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Digital Education Strategy 2024–2030 (Ministry for Education, Youth, Sport, Research & Innovation)

AI law in Malta: The Digital Education Strategy 2024–2030 sets a national roadmap for embedding digital competence across Malta’s education system. Developed by the Ministry for Education, Sport, Youth, Research & Innovation (MEYR) and the Directorate for Digital Literacy and Transversal Skills (DDLTS), it defines four pillars—Nurturing Digital Global Citizens, Empowering Educators, Community Engagement, and Enriching Digital Resources—and a set of measures and actions to be implemented across 2024–2030....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

226 of 2025 - Artificial Intelligence Regulations, 2025 (Legal Notice)

AI law in Malta: Legal Notice 226 of 2025 establishes Malta's national implementing framework for the EU Artificial Intelligence Act, designating the Malta Digital Innovation Authority (MDIA) as the primary national market surveillance and competent authority for most AI systems while setting national enforcement powers, conformity assessment and sandbox arrangements. It complements Legal Notice 227 of 2025 which designates the Information and Data Protection Commissioner for specified high‑risk, data‑sensitive AI systems....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Malta Digital Strategy 2023–2027

AI law in Malta: Malta Diġitali 2022–2027 is the national digital strategy setting Malta’s policy priorities, goals and enablers for digital transformation across society, government and the economy. It emphasises people‑centred digital public services, infrastructure, cybersecurity, data governance and skills while aligning with EU Digital Decade targets and national economic objectives....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

National eSkills Strategy 2022–2025 (eSkills Malta Foundation)

AI law in Malta: The National eSkills Strategy 2022–2025, coordinated by the eSkills Malta Foundation, sets Malta's priorities for digital skills across four pillars (Education, Society, Workforce, ICT professionals). It builds on the 2019–2021 strategy and aligns with the EU Path to the Digital Decade, focusing on inclusion, employability and multi‑stakeholder governance....

Official materialNational StrategyOfficial source · digital-strategy.ec.europa.eu ↗

National Strategy

Malta — The Ultimate AI Launchpad: A Strategy and Vision for Artificial Intelligence in Malta 2030

AI law in Malta: Launched October 2019, Malta’s national AI strategy — 'The Ultimate AI Launchpad' — sets a vision for Malta to become an AI testbed and scale hub by 2030. The strategy establishes three pillars (investment/startups, public sector adoption, private sector adoption) and three enablers (education & workforce, legal & ethical framework, ecosystem infrastructure), together with a national AI certification programme and a 72-action short-term plan....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

Law / Act

Malta Digital Innovation Authority (Amendment) Act, Act No. XIX of 2024

AI law in Malta: Act No. XIX of 2024 amends the Malta Digital Innovation Authority Act (Cap. 591) to broaden the powers, remit and institutional framework of the Malta Digital Innovation Authority (MDIA), update definitions and terminology, create an administrative review mechanism, strengthen enforcement and sanctions, and enable the Authority to perform expanded regulatory functions related to novel digital technologies....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Malta — Towards Ethical and Trustworthy AI (Malta's Ethical AI Framework)

AI law in Malta: Malta’s Ethical AI Framework ("Towards Trustworthy AI") is a non‑binding national guidance published in October 2019 that sets out principles and practical control practices to promote ethical, transparent and human-centric deployment of AI. It establishes four core principles — human autonomy, prevention of harm, fairness and explicability — and underpins Malta’s voluntary national AI certification initiative managed by the Malta Digital Innovation Authority (MDIA)....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified