- GDPR
Regulation (EU) 2016/679 of the European Parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - ePrivacy
Directive Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on Privacy and Electronic Communications) - Directive on the Processing of Personal Data by Competent Authorities
Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA - Passenger Name Record Directive
Directive (EU) 2016/681 of the European Parliament and of the Council of 27 April 2016 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime
Data Protection Laws
Return to GDPR pageCurrent European Union Data Protection Legislation
Current Local Data Protection Legislation
- Data Protection Act (Cap. 586 of the Laws of Malta)
- Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01)
- Notification and Fees (Data Protection Act) Regulations (S.L. 586.02)
- Third Country (Data Protection Act) Regulations (S.L. 586.03)
- Processing of Personal Data (Protection of Minors) Regulations (S.L. 586.04)
- Transfer of Personal Data to Third Countries Order (S.L. 586.05)
- Processing of Personal Data for the purposes of the General Elections Act and the Local Councils Act Regulations (S.L. 586.06)
- Processing of Personal Data (Education Sector) Regulations (S.L. 586.07)
- Data Protection (Processing of Personal Data by Competent Authorities for the Purposes of the Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties) Regulations (S.L. 586.08)
- Restriction of the Data Protection (Obligations and Rights) Regulations (S.L. 586.09)
- Processing of Data concerning Health for Insurance Purposes Regulations (S.L. 586.10)
- Processing of Child’s Personal Data in relation to the Offer of Information Society Services Regulations (S.L. 586.11)
Proposed European Union Data Protection Legislation
ePrivacy Regulation (European Parliament proposal) *
Published on 4th May 2018
Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002/58/EC (Regulation on Privacy and Electronic Communications)
*Although these draft texts have been published, they do not form part of the European Union Acquis Communautaire yet since they are still subject to amendments.
Stay updated with our latest insights
New Law enables Third Parties to a Contract to benefit from Data Protection Rights
A recently published Legal Notice (204 of 2023) has created the “Enforcement of the Rights of Data Subjects in relation to Transfers of Personal Data to a Third Country or an International Organisation Regulations” (Subsidiary Legislation 586.12). This marks the first time that an entirely new subsidiary law has been enacted under the auspices of the Data Protection Act (Chapter 586 of the laws of Malta), since June 2018, shortly after the coming into force of the GDPR. S.L. 586.12 resolves a long-standing lacuna in the field of Maltese data protection law. The scope and purpose of this new law…
The EDPB Issues Opinion on the New EU-U.S. Data Privacy Framework
On the 28th of February 2023, the European Data Protection Board (hereinafter referred to as the “EDPB”) issued its Opinion on the European Commission’s draft adequacy decision regarding the EU-U.S. Data Privacy Framework. Whilst acknowledging the significant improvements made to the Data Privacy Framework such as the improved new redress mechanism under the Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities, the EDPB’s opinion also highlighted some issues of concern which had previously been raised so as to ensure that the new adequacy decision will be long-lasting. The principal issues of concern specifically relate to the data…
Digital Services Act Deadline for Online Platform Providers
17 February, 2023, marks the deadline for providers of online platforms to publish information on the average monthly active recipients of their services in the European Union (EU), as required by the Digital Services Act (Regulation (EU) 2022/2065) (DSA). The DSA defines online platforms as providers of hosting services that publicly disseminate users’ information. The European Commission has previously provided that online platforms cover a wide range of activities and include: Online marketplaces; Social media platforms; Creative content outlets; App stores; Platforms for the collaborative economy; Price comparison websites; and Search engines. Under the DSA, providers of online platforms must…
Join our mailing list
Get in touch by sending us a message or by contacting us directly.