- GDPR
Regulation (EU) 2016/679 of the European Parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - ePrivacy
Directive Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on Privacy and Electronic Communications) - Directive on the Processing of Personal Data by Competent Authorities
Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA - Passenger Name Record Directive
Directive (EU) 2016/681 of the European Parliament and of the Council of 27 April 2016 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime
Data Protection Laws
Return to GDPR pageCurrent European Union Data Protection Legislation
Current Local Data Protection Legislation
- Data Protection Act (Cap. 586 of the Laws of Malta)
- Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01)
- Notification and Fees (Data Protection Act) Regulations (S.L. 586.02)
- Third Country (Data Protection Act) Regulations (S.L. 586.03)
- Processing of Personal Data (Protection of Minors) Regulations (S.L. 586.04)
- Transfer of Personal Data to Third Countries Order (S.L. 586.05)
- Processing of Personal Data for the purposes of the General Elections Act and the Local Councils Act Regulations (S.L. 586.06)
- Processing of Personal Data (Education Sector) Regulations (S.L. 586.07)
- Data Protection (Processing of Personal Data by Competent Authorities for the Purposes of the Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties) Regulations (S.L. 586.08)
- Restriction of the Data Protection (Obligations and Rights) Regulations (S.L. 586.09)
- Processing of Data concerning Health for Insurance Purposes Regulations (S.L. 586.10)
- Processing of Child’s Personal Data in relation to the Offer of Information Society Services Regulations (S.L. 586.11)
Proposed European Union Data Protection Legislation
ePrivacy Regulation (European Parliament proposal) *
Published on 4th May 2018
Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58/EC (Regulation on Privacy and Electronic Communications)
*Although these draft texts have been published, they do not form part of the European Union Acquis Communautaire yet since they are still subject to amendments.
Stay updated with our latest insights
The EDPB Issues Opinion on the New EU-U.S. Data Privacy Framework
On the 28th of February 2023, the European Data Protection Board (hereinafter referred to as the “EDPB”) issued its Opinion on the European Commission’s draft adequacy decision regarding the EU-U.S. Data Privacy Framework. Whilst acknowledging the significant improvements made to the Data Privacy Framework such as the improved new redress mechanism under the Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities, the EDPB’s opinion also highlighted some issues of concern which had previously been raised so as to ensure that the new adequacy decision will be long-lasting. The principal issues of concern specifically relate to the data…
Digital Services Act Deadline for Online Platform Providers
17 February, 2023, marks the deadline for providers of online platforms to publish information on the average monthly active recipients of their services in the European Union (EU), as required by the Digital Services Act (Regulation (EU) 2022/2065) (DSA). The DSA defines online platforms as providers of hosting services that publicly disseminate users’ information. The European Commission has previously provided that online platforms cover a wide range of activities and include: Online marketplaces; Social media platforms; Creative content outlets; App stores; Platforms for the collaborative economy; Price comparison websites; and Search engines. Under the DSA, providers of online platforms must…
The New EU-US Personal Data Transfer Framework
The agreement on a new EU-U.S. data privacy framework between EU Commission President Ursula Von Der Leyen and U.S. President Joe Biden had already been announced on 25 March 2022 (for background, please refer to our previous article The EU-US Privacy Shield: Third Time’s a Charm? - Mamo TCV). However, the stability and longevity of the agreement was questioned by Austrian privacy activist Max Schrems who sent an open letter to stakeholders as a warning that the new framework risks being declared invalid, and consequently being struck down by the CJEU, should no reforms to U.S. law take place to…
Join our mailing list
Get in touch by sending us a message or by contacting us directly.