Associate
Nicole Bonett
Nicole Bonett
Nicole Bonett is an Associate at Mamo TCV Advocates. Her main areas of practice include telecoms, media and technology, data protection, intellectual property and consumer law. Nicole holds a Bachelor of Laws (Honours) and a Master of Advocacy from the University of Malta. She was called to the Bar in March 2023. She furthered her studies at Tilburg University, in the Netherlands, where she obtained a Master of Laws (LL.M) in Law and Technology.
Nicole advises on various matters relating to information technology, cybersecurity, data protection, and intellectual property. This includes assistance with regulatory compliance, including under the GDPR, DORA, and the NIS 2 Directive. Nicole also assists clients with contract drafting and review, trademark clearance and prosecution, and represents clients before the Comptroller of Industrial Property in Malta and the EUIPO.
Education
- Bachelor of Laws (Honours), University of Malta, Malta
- Master of Advocacy (M.Adv), University of Malta, Malta
- Master of Laws (LL.M) in Law and Technology, Tilburg University, Netherlands
Representative Experience
- Carried out a group-wide GDPR audit for a local group company;
- Assisted with the identification and valuation of intellectual property of various clients across varying industries;
- Regularly advises various entities in varying sectors on several aspects of data protection legislation compliance;
- Regularly drafts various data protection related documentation, such as privacy policies and notices;
- Regularly assists clients with data breaches;
- Regularly advises various financial entities and ICT service providers on several aspects of DORA compliance;
- Regularly conducts DORA gap analyses, drafts DORA agreements and policies, and delivers Board training on DORA;
- Regularly assists local and multinational clients in anti-counterfeiting proceedings with Malta customs;
- Regularly assists various clients across various industries with trademark enforcement, trademark clearance and prosecution;
- Regularly represents various clients before the Comptroller of Industrial Property in Malta.
Memberships
- Admitted to the Maltese Bar, Superior Courts of Malta (2023)
- Malta Chamber of Advocates
Get In Touch
Address
MAMO TCV Advocates
Palazzo Pietro Stiges
103, Strait Street
Valletta, VLT 1436
Malta
Stay updated with our latest insights
Malta’s AI Act Authority Designations
The Malta Digital Innovation Authority (“MDIA”) and the Information Data Protection Commission (“IDPC”) have been identified as the Maltese Market Surveillance Authorities (“MSA”) under EU Regulation 2024/1689 (the “AI Act”), albeit the process of designation has yet to be formally concluded. It is expected that this will take place shortly in the coming days. The MSAs will be tasked with overseeing the responsible use of AI systems in Malta and with having the competence to carry out investigations and issue fines and penalties where necessary. They will have a diverse set of responsibilities that may be categorised as follows: Maintaining…
Threat-Led Penetration Testing Regulatory Technical Standards under DORA Take Effect
As of today, 8 July 2025, the Regulatory Technical Standards (RTS) on Threat-Led Penetration Testing (TLPT) are now effective, including in Malta, following their publication in the Official Journal on 18 June 2025. These RTS supplement Article 26 of the Digital Operational Resilience Act (‘DORA’) and lay down a framework for the execution of TLPT. The RTS specify the criteria used for identifying the financial entities which are required to perform threat-led penetration tests and lay down organisational arrangements for financial entities. The RTS also include provisions on risk management and specify criteria for engaging TLPT providers. Moreover, the RTS…
DORA ICT Subcontracting RTS Published
Following the European Commission’s earlier rejection, the Regulatory Technical Standards (RTS) on ICT Subcontracting have been published in the EU Official Journal on 2 July 2025. The RTS will enter into force 20 days after publication, which means that they will come into effect on 22 July 2025. Financial entities and ICT providers must ensure to update their contractual arrangements to fulfil the conditions set out in the RTS to ensure compliance by 22 July 2025. To receive updates on this important development and related news please visit our website and consider subscribing to our newsletter. This document does not purport…
