Praxikon
All member states

Enforcement per member state

AI Act enforcement in Malta

Last verification round: 2026-08-10

Who supervises · designated
Malta Digital Innovation Authority (MDIA)
Single point of contact
Malta Digital Innovation Authority (MDIA)
Implementing law
in force

The situation in this country

Malta implemented the AI Act through two Legal Notices published in the Government Gazette (No. 21,519) on 10 October 2025. The MDIA is the principal market surveillance authority, notifying authority, single point of contact and responsible for the national AI sandbox; the Information and Data Protection Commissioner (IDPC) is market surveillance authority for certain data-sensitive and law-enforcement-related AI systems. The framework provides for administrative penalties up to 350,000 euros per infringement or 1 percent of worldwide annual turnover if higher, plus a daily penalty of 12,000 euros for ongoing infringements. No fine or formal investigation under the AI Act is known yet.

What has happened

  • 2025-10-10 | Maltese regering

    Legal Notices 226 and 227 of 2025: Maltese AI Act implementation framework

    The Artificial Intelligence Regulations 2025 (LN 226/2025) and the accompanying LN 227/2025 were published on 10 October 2025 in Government Gazette No. 21,519. LN 226 designates the MDIA as principal market surveillance authority and notifying authority and sets enforcement powers, conformity assessment, the sandbox and the penalty framework (up to 350,000 euros or 1 percent of worldwide annual turnover, plus daily penalties of 12,000 euros); LN 227 gives the IDPC market surveillance tasks including for AI systems in the law enforcement domain.

    Laws of Malta (legislation.mt), Legal Notice 226 of 2025

  • 2025-10-10 | Maltese regering

    MDIA designated as market surveillance authority and contact point, IDPC as second supervisor

    Under LN 226/2025 the MDIA is the lead market surveillance authority, the single point of contact and the sole national authority for the AI regulatory sandbox. Under LN 227/2025 the IDPC acts as market surveillance authority for specific high-risk and data-sensitive AI systems.

    Malta Digital Innovation Authority (officiële site)

Sources