Senior Regulatory Advisor
Ian Deguara
Ian Deguara
Ian Deguara is a Senior Regulatory Advisor at Mamo TCV Advocates. He has more than twenty years’ experience in data protection, privacy, regulatory compliance, and governance. Before joining the Firm, he served in a number of senior positions within Malta’s national data protection authority, culminating in his appointment as Information and Data Protection Commissioner, a role he held between December 2020 and April 2026.
During his tenure as Commissioner, Ian led the supervisory authority through a period of significant regulatory and technological change, overseeing complex investigations, regulatory enforcement, technical audits, and strategic policy initiatives. He played a key role in strengthening Malta’s data protection framework and contributed to the country’s preparations for the implementation of the GDPR.
Drawing on extensive regulatory and enforcement experience, Ian advises public and private sector organisations on data protection governance, compliance programmes, risk management, investigations, and the practical application of data protection law. He is recognised for delivering pragmatic, commercially focused advice while safeguarding individuals’ fundamental rights.
Practice Areas
- Data Protection and Privacy
Education
- Bachelor of Science (Business and Computing) (1997, University of Malta)
- Bachelor of Commerce (Hons.)(Management) (2001, University of Malta)
Representative Experience
Advised public and private sector organisations on compliance with the GDPR, data protection legislation, and broader digital regulatory frameworks, including the design and implementation of effective privacy governance programmes.
Led complex regulatory investigations, audits, and enforcement proceedings involving cross-border processing, data breaches, international data transfers, and high-risk processing activities.
Provided strategic advice on Data Protection Impact Assessments (DPIAs), privacy by design and by default, AI governance, and the lawful deployment of emerging technologies.
Played a leading role in Malta’s implementation of the GDPR through legislative development, regulatory guidance, stakeholder engagement, and nationwide awareness initiatives.
Represented Malta at the European Data Protection Board (EDPB) and other international forums, contributing to the consistent interpretation and application of European data protection law and regulatory policy.
Get In Touch
Address
MAMO TCV Main Office
Palazzo Pietro Stiges
103, Strait Street
Valletta, VLT 1436
Malta
Stay updated with our latest insights
No Liquidation Committee? Here’s How a Shareholder Can Step in
This article forms part of a series exploring key procedures and rights under the Companies Act (Chapter 386 of the Laws of Malta) in the context of company liquidation. While not every step requires a direct court application, creditors and other stakeholders still play an active role in shaping the process. When a company is being wound up by the court, a liquidation committee may be appointed to oversee and support the liquidator’s work. This committee is typically made up of creditors and is meant to safeguard the interests of those with a stake in the company’s remaining assets. But…
EU Commission Classifies ChatGPT as a Search Engine: A Brief Look at What This Means
The European Commission has recently designated OpenAI’s ChatGPT as a Very Large Online Search Engine (“VLOSE”), whilst Roblox and Reddit have been designated as Very Large Online Platforms (“VLOPs”), making all three subject to the Digital Services Act (“DSA”) . Having each exceeded an average of 45 million monthly users throughout the European Union (“EU”), the newly designated services now have four months (until January 2027) to comply with all additional requirements mandated by the DSA for both VLOSEs and VLOPs. This is particularly noteworthy in the case of ChatGPT, which has now joined the two other VLOSEs, 'Bing' (operated…
No Free Rides on Reputed Marks: The CJEU’s Balancing Act Between Trademark Rights and Political Expression in Inter IKEA Systems v Vlaams Belang
On the 8th of May 2023, a Belgian court, the Nederlandstalige ondernemingsrechtbank Brussel , referred a question to the Court of Justice of the European Union in Case C-298/23 Inter IKEA Systems BV v Vlaams Belang, raising an important issue at the intersection of trademark law and freedom of expression. The dispute concerned the use of the well-known IKEA trademark by the Belgian political party Vlaams Belang in connection with its proposals for immigration and asylum reform. The party promoted its programme under the title ‘IKEA-PLAN’, with the acronym standing for ‘Immigratie Kan Echt Anders’ (‘Immigration Really Can Be Different’).…
