Malta: Cybersecurity

For decades, digital trust has relied on a foundational assumption: that the cryptographic systems securing financial infrastructure are effectively unbreakable within any realistic business horizon. That assumption is now being re‑examined.

The Malta Financial Services Authority has introduced a new General Code of Conduct for Decision Makers in the Financial Services Industry, establishing principles-based supervisory expectations for governance, leadership behaviour and senior-level decision-making. While non-prescriptive, the Code serves as a key reference point in supervisory engagement and inspections, applying broadly to board members, senior executives and decision makers within MFSA-supervised and listed entities.

AI's impact hinges on the safeguards and governance frameworks that guide its deployment, not the technology itself. Recent harmful chatbot incidents expose the inadequacy of voluntary self-regulation when commercial pressures eclipse safety considerations. The EU AI Act emerges as a critical regulatory intervention to establish mandatory safety standards, accountability mechanisms, and oversight structures that protect the public from preventable AI-related harm.

On 16 January 2026, Malta has officially issued its intended transposition of the EU's Critical Entities Directive (Directive EU 2022/2557) ("CER") into national legislation through the Resilience of Critical Entities...

On 19 November, the European Commission published the EU Digital Simplification Package (the "Digital Omnibus") which comprises two proposed laws.

The boardroom is entering a new era of complexity and accountability. Directors today face a landscape shaped by escalating cyber threats, expanding personal liabilities...

The European Union Agency for Cybersecurity (ENISA) has launched the European Vulnerability Database (EUVD), a platform developed in line with the NIS2 Directive.

Effective June 1, 2025, the Malta Ship Registry will begin issuing electronic certificates for all Maltese-registered vessels, as outlined in Merchant Shipping Notice 193.

The European Union has been working to establish comprehensive cybersecurity frameworks that address the growing threats to the digital infrastructure.