GDPR
Is your organisation GDPR compliant?
The GDPR or ‘General Data Protection Regulation’ (Regulation 2016/679/EU) is a new single EU law dealing with data protection that is intended to do away with the fragmented system that was previously in place and update laws across the EU that have not kept up with the digital age we live in. On 25 May 2018, as in the case of other EU Member States, the GDPR took effect in Malta. The new Data Protection Act, 2018 (Chapter 586 of the Laws of Malta) has also come into effect. Data controllers and processors had until this date to prepare for the various new, and in some cases, onerous obligations introduced by the GDPR.
Maltese organisations (especially those processing large amounts of personal data) must take all necessary measures to ensure full compliance with this new law and this, as soon as possible.
UNDERSTANDING GDPR
GDPR at a glance
- Fines up to €20,000,000 or 4% of an entity’s total worldwide annual turnover
- Significantly expanded territorial scope
- Mandatory data breach notification in certain cases
- Mandatory appointment of a Data Protection Officer in certain cases
- Data Processors now also directly responsible at law
- More stringent consent requirements
- Increased level of information to be provided to data subjects
- More stringent requirements in controller-processor contracts
- Removal of the general notification requirement
- New data subject rights
WHAT WE BELIEVE IN
How can we help?
Our Reputation
Mamo TCV Advocates is a leading Maltese law firm with years of experience in the field of privacy law and, in particular, data protection law. With clients ranging from world-famous multinational IT companies to individual data subjects we can provide your organisation practical advice regardless of the situation you are in.
GDPR Compliance
Over the past years we have carried out several GDPR audits and training sessions for our diverse portfolio of clients and we are now assisting clients with their various new obligations at law. From rules relating to direct marketing to data retention obligations, we have you covered.
What we Offer
- Comprehensive expert legal advisory services
- Data protection risk assessments
- Training of DPOs and other staff members
- Drafting of layered privacy policies & other notices
- Drafting of data processing agreements & addenda
- Full legal representation in contentious matters and/or IDPC investigations
Stay updated with our latest insights
Are you ready for DORA?
The ‘Digital Operational Resilience Act’ or “DORA” (Regulation (EU) 2022/2554) shall be enhancing and improving Information and Communications Technology (‘ICT’) operational risk requirements across various financial sectors. Subsequently, it imposes obligations on a vast array of different financial entities, as well as certain ICT service providers that assist such financial entities. These financial entities include the following: Credit institutions Account information service providers Investment firms Alternative Investment Fund Managers Crypto-asset service providers Payment institutions Central securities depositories Credit rating agencies Data reporting service providers Insurance and reinsurance undertakings Insurance intermediaries Crowdfunding service providers Mamo TCV Advocates can provide assistance by…
DSA Update: Maltese Implementing Law, Including New Registration Obligations, Now in Effect
The EU Digital Services Act (Regulation (EU) 2022/2065) (the “DSA”) has been implemented into Maltese law by virtue of the Digital Services (Designation and Enforcement) Order, Subsidiary Legislation 418.05, (the “Order”) which came into force on 12th March 2024. The Order designates the Malta Communications Authority (“MCA”) as the Digital Services Coordinator for Malta. This role, created by the DSA, tasks the MCA with ensuring that intermediary service providers established in Malta comply with their obligations under the DSA. This entails handling any complaints received by users and acting as the point of contact between service providers and users. Furthermore,…
Full Implementation of Digital Services Act Imminent
The EU Digital Services Act (‘DSA’), formally titled as the ‘Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market For Digital Services and amending Directive 2000/31/EC’ is intended to overhaul the outdated framework that previously regulated online intermediaries such as auction sites, social networks, ISPs and platforms which allow for the sharing of content over the Internet. The DSA contains sets of obligations which increase in severity in proportion to the size, role and impact of the online intermediary. Therefore, so-called ‘very large online platforms’ (‘VLOPs’) and ‘very large online…
