Data Protection Act (Act XX of 2018)

简称：Malta DPA 2018

法规信息
  • 国家/地区：欧盟 / 马耳他
  • 发布单位：Parliament of Malta
  • 发布日期：2018-05-28
  • 生效日期：2018-05-28
  • 法规类别：综合性数据保护法
  • 法规文号：Act XX of 2018, Chapter 586 of the Laws of Malta
查看 / 下载 PDF
法规简介

马耳他通过《数据保护法》(Act XX of 2018, Chapter 586)进一步实施和细化GDPR，2018年5月28日生效，取代近20年历史的旧法(Chapter 440)。法律遵循欧洲委员会《个人数据自动处理保护公约》(108号公约+及2018年现代化版本)原则。附属立法涵盖电子通信部门数据处理规则、未成年人保护、教育部门数据处理规则等。监管机构为信息和数据保护专员(IDPC, Information and Data Protection Commissioner)。处罚遵循GDPR标准：最高2000万欧元或全球年营业额4%。

IDPC launches children's online data protection campaign Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Guidelines and FAQ on Data Protection Officers Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Data Protection for Individuals - Your Rights Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Guidelines on CCTV and Data Protection Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Exercise your rights for SIS II Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Visa Information System (VIS) Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Entry / Exit System (EES) Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
European Travel Information and Authorisation System (ETIAS) Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
social media
risk assess

Online Self-Assessment Compliance Tool

Find out how to use our online self-assessment compliance tool to indicate risks of non-compliance with the GDPR.

Information and Data Protection Appeals Tribunal 

Click here for more information about your right to file an appeal from a decision of the Commissioner and the guidelines to file such an appeal.

decision

Decisions


This section lists information about the legally binding decisions taken by the Commissioner.

Latest News & Publications

EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines

EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines   22 September 2026 During its latest plenary, the EDPB has adopted guidelines on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR and the final version of its guidelines on the interplay between the Digital Services Act […]

22
Sep

Read More b

Commissioner interviewed by TVMnews on 2025 Annual Report

Commissioner interviewed by TVMnews on 2025 Annual Report   09 September 2026   Earlier this week, the Information and Data Protection Commissioner, Dr Reno Borg, was featured in a TVMnews report following the publication of the IDPC Annual Report 2025. The news item highlighted key developments in the office's work during the year, including the […]

09
Sep

Read More b

Publications

Retention of electronic communications data: CJEU Advocate General issues opinion on the criteria for assessing the compatibility of national legislation with EU law

Retention of electronic communications data: CJEU Advocate General issues opinion on the criteria for assessing the compatibility of national legislation with EU law   09 September 2026   On 3 September 2026, the European Court of Justice (CJEU) issued an important opinion of the Advocate General at the Court, Maciej Szpunar. In 2022, Belgium adopted […]

09
Sep

Read More b

EU law does not require the disclosure of information relating to all shareholders of public limited liability companies, including minority shareholders

EU law does not require the disclosure of information relating to all shareholders of public limited liability companies, including minority shareholders   04 September 2026 In a recent judgement of the European Court of Justice (CJEU), the court stated that EU law does not require the disclosure of information relating to all shareholders of public […]

04
Sep

Read More b

IDPC Publishes 2025 Annual Report

IDPC Publishes 2025 Annual Report   19 August 2026   The Office of the Information and Data Protection Commissioner (IDPC) has published its Annual Report and Financial Statements 2025, providing an overview of the office's regulatory work, enforcement activities, stakeholder engagements, and key developments in the fields of data protection, freedom of information and artificial […]

19
Aug

Read More b

A coherent data protection framework for EU Justice and Home Affairs agencies needs stronger supervision and enforcement

A coherent data protection framework for EU Justice and Home Affairs agencies needs stronger supervision and enforcement   13 August 2026   The European Data Protection Supervisor (EDPS) has issued Opinion 17/2026 on the European Commission’s Proposal for a Regulation amending Regulation (EU) 2018/1725, the EU Data Protection Regulation (EUDPR), which governs the processing of personal data by […]

13
Aug

Read More b

IDPC Participates in AI Act conference at MDIA

IDPC participates in AI Act conference at MDIA   06 August 2026   Dr. Marco Fagnano, Legal Counsel and AI Regulatory Manager at the Office of the Information and Data Protection Commissioner (IDPC), was recently invited by the Malta Digital Innovation Authority (MDIA) to participate in two panels to contribute on the implementation of the […]

06
Aug

Read More b

European Commission preliminary finds TikTok in breach of Digital Services Act for failing to ensure safe accounts for minors

European Commission preliminary finds TikTok in breach of Digital Services Act for failing to ensure safe accounts for minors   03 August 2026   On 24 July 2026, the European Commission sent TikTok preliminary findings indicating that TikTok accounts of minors do not meet the safety standards required under the Digital Services Act (DSA).  On […]

03
Aug

Read More b

IDPC draws attention to revised EU AI Act timelines following Council approval

IDPC draws attention to revised EU AI Act timelines following Council approval   27 July 2026   The Office of the Information and Data Protection Commissioner (IDPC), in its role as Malta’s Market Surveillance Authority (MSA) for high-risk AI systems in law enforcement, migration & border control and justice & democracy, draws the attention of […]

27
Jul

Read More b

The online publication of the names of professional athletes who have infringed anti-doping rules may be compatible with EU law

The online publication of the names of professional athletes who haveinfringed anti-doping rules may be compatible with EU law   22 July 2026   In a recent judgement, the Court of Justice of the European Union stated that the online publication of the names of professional athletes who have infringed anti-doping rules may be compatible […]

22
Jul

Read More b

EDPB calls for legal basis for cross-regulatory information sharing

EDPB calls for legal basis for cross-regulatory information sharing   20 July 2026 At a high-level meeting in Dublin on 16 and 17 July 2026, the European Data Protection Board (EDPB) called for a clear legal basis for the sharing of information among regulators with different competences.  The Board also discussed how to further expand […]

20
Jul

Read More b
Load More
wpChatIcon
wpChatIcon