The EU AI Act
European Commission Proposes Updated EU Cybersecurity Act (The Cybersecurity Act 2) DORAGDPRTelecoms, Media & Technology

European Commission Proposes Updated EU Cybersecurity Act (The Cybersecurity Act 2)

On 20 January 2026, the Proposal for a Regulation for the EU Cybersecurity Act (‘The Cybersecurity Act 2’) was published by the European Commission to update and replace Regulation (EU) 2019/881 (the “2019 Cybersecurity Act”). The Proposal was introduced in response to major changes in cybersecurity threats as well as the weaknesses identified in the 2019 Cybersecurity Act. Since the adoption of the 2019 Cybersecurity Act, cyberattacks have become more frequent and sophisticated, increasingly targeting critical infrastructures, essential services and digital supply chains. At the same time, growing geopolitical tensions and the EU’s reliance on technologies from third countries have…
Mamo TCV Advocates
30th January 2026
NIS 2 and Critical Entities Resilience Framework Enter into Force in Malta DORAGDPRTelecoms, Media & Technology

NIS 2 and Critical Entities Resilience Framework Enter into Force in Malta

Two long-awaited Legal Notices published on Friday, 23rd January 2026 have brought into force key elements of Malta’s cybersecurity and resilience framework, implementing two recent EU legislative developments. Entry Into Force of the NIS 2 Directive Legal Notice 22 of 2026 brought Subsidiary Legislation 460.41, the Measures for a High Common Level of Cybersecurity Across the European Union (Malta) Order, into force on Friday, 23rd January 2026. This Subsidiary Legislation transposes the EU Network and Information Systems Directive II (more commonly known as ‘NIS 2’) into Maltese law and is brought into force as already previously published without substantial substantive…
Mamo TCV Advocates
26th January 2026
Security Sign
Malta’s Draft Order Transposing the EU NIS 2 Directive Now Open for Public Consultation DORATelecoms, Media & Technology

Malta’s Draft Order Transposing the EU NIS 2 Directive Now Open for Public Consultation

The Ministry for Home Affairs, Security and Employment (MHSE) published the proposed Maltese draft order for the transposition of the EU Network and Information Systems Directive II (‘NIS 2’) on 6 September 2024. The draft order, titled ‘Measures For A High Common Level Of Cybersecurity Across The European Union (Malta) Order, 2024’ (the ‘Draft Order’) is currently open for public consultation until 7 October, seeking input for the effective implementation of the NIS 2 Directive in Malta, which must be transposed in national law by 17 October 2024. The Draft Order implements the NIS 2 Directive which significantly expands upon…
Mamo TCV Advocates
13th September 2024
Mamo TCV Advocates - DORA Services
Are you ready for DORA? Banking & FinanceCapital MarketsDORAInsurance & ReinsuranceTelecoms, Media & Technology

Are you ready for DORA?

The ‘Digital Operational Resilience Act’ or “DORA” (Regulation (EU) 2022/2554) shall be enhancing and improving Information and Communications Technology (‘ICT’) operational risk requirements across various financial sectors. Subsequently, it imposes obligations on a vast array of different financial entities, as well as certain ICT service providers that assist such financial entities. These financial entities include the following: Credit institutions Account information service providers Investment firms Alternative Investment Fund Managers Crypto-asset service providers Payment institutions Central securities depositories Credit rating agencies Data reporting service providers Insurance and reinsurance undertakings Insurance intermediaries Crowdfunding service providers Mamo TCV Advocates can provide assistance by…
Mamo TCV Advocates
18th June 2024
The Introduction of an Updated Process for the Reporting of Major ICT-Related Incidents
The Introduction of an Updated Process for the Reporting of Major ICT-Related Incidents Investment Services & Funds

The Introduction of an Updated Process for the Reporting of Major ICT-Related Incidents

On the 12th of July 2022, the Malta Financial Services Authority (the “MFSA”) issued a Consultation Document on the reporting of major ICT-related incidents with a consultation period expiring on the 5th of August 2022. The MFSA worked on introducing an updated major ICT-related incident reporting process that replaces the previous process that was communicated on the 25th of September 2019 entitled ‘Cybersecurity - Threat Mitigation’. The former process was introduced with the aim of safeguarding national as well as international financial institutions from malicious attack campaigns. The MFSA issued a renovated major ICT-related incident reporting process in line with…
Anthea Sammut​
17th October 2022