- GDPR
Regulation (EU) 2016/679 of the European Parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - ePrivacy
Directive Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on Privacy and Electronic Communications) - Directive on the Processing of Personal Data by Competent Authorities
Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA - Passenger Name Record Directive
Directive (EU) 2016/681 of the European Parliament and of the Council of 27 April 2016 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime
Data Protection Laws
Return to GDPR pageCurrent European Union Data Protection Legislation
Current Local Data Protection Legislation
- Data Protection Act (Cap. 586 of the Laws of Malta)
- Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01)
- Notification and Fees (Data Protection Act) Regulations (S.L. 586.02)
- Third Country (Data Protection Act) Regulations (S.L. 586.03)
- Processing of Personal Data (Protection of Minors) Regulations (S.L. 586.04)
- Transfer of Personal Data to Third Countries Order (S.L. 586.05)
- Processing of Personal Data for the purposes of the General Elections Act and the Local Councils Act Regulations (S.L. 586.06)
- Processing of Personal Data (Education Sector) Regulations (S.L. 586.07)
- Data Protection (Processing of Personal Data by Competent Authorities for the Purposes of the Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties) Regulations (S.L. 586.08)
- Restriction of the Data Protection (Obligations and Rights) Regulations (S.L. 586.09)
- Processing of Data concerning Health for Insurance Purposes Regulations (S.L. 586.10)
- Processing of Child’s Personal Data in relation to the Offer of Information Society Services Regulations (S.L. 586.11)
Proposed European Union Data Protection Legislation
ePrivacy Regulation (European Parliament proposal) *
Published on 4th May 2018
Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58/EC (Regulation on Privacy and Electronic Communications)
*Although these draft texts have been published, they do not form part of the European Union Acquis Communautaire yet since they are still subject to amendments.
Stay updated with our latest insights
Malta’s Transposition of the NIS 2 Directive: S.L. 460.41
Following Malta’s Draft Order transposing the EU NIS 2 Directive, which closed for public consultation on 7 October 2024, as an EU Member State, Malta was obliged to transpose EU Directive 2022/2555 (‘NIS 2’) by 17 October 2024. The transposition was finally implemented on 8 April 2025 through Legal Notice 71 of 2025 which creates the Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order, 2025 as Subsidiary Legislation 460.41 (S.L. 460.41). It should however be noted that at time of writing, S.L. 460.41 is not yet in force, though it is expected to come…
European Blockchain Sandbox 3rd Cohort & Best Practices Webinar
The selection process for the third and final cohort of the European Blockchain Sandbox has been completed and the final twenty selected use cases have now been announced. Moreover, the European Blockchain Sandbox will soon be publishing the second cohort’s Best Practices Report which shall contain an overview of the regulatory best practices identified. The Report will be launched during a public webinar to be held on the 29th April 2025 at 14:00 CET, wherein the public is invited to ask any questions they may have regarding the Report. In conjunction, the award for the Most Innovative Regulator for the…
European Commission Rejects Draft Regulatory Technical Standards on ICT Subcontracting
The European Commission has communicated its rejection of the draft Regulatory Technical Standards (RTS) on subcontracting ICT services supporting critical or important functions supplementing the Digital Operational Resilience Act (DORA). In its communication, the Commission held that the European Supervisory Authorities (ESAs) exceeded their mandate under Article 30(5) of DORA (which came into effect on 17 January 2025) by introducing requirements not specifically linked to the conditions for subcontracting in Article 5 of the RTS. The Commission has made it clear that Article 5 and the related recital 5 of the draft RTS must be omitted from the draft RTS…
Join our mailing list
Get in touch by sending us a message or by contacting us directly.