What Malta has done nationally under Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744: the accompanying law, which bodies it has designated as market surveillance authority, single point of contact and notifying authority, its Article 99 penalty regime, whether an Article 57 regulatory sandbox exists (the deadline is 2 August 2027), and any national guidance that reaches courts, law firms or legal-AI deployers. Each row is dated and sourced to the gazette, parliament or authority; titles in the original language are quoted, English titles marked where translated by us.
Artificial Intelligence (Designation of the Malta Digital Innovation Authority) Regulations, 2025
Legal Notice 226 of 2025 creates Malta's main AI Act implementation framework for the Malta Digital Innovation Authority. It covers MDIA's market-surveillance, single-contact-point, notifying-authority, sandbox and enforcement powers.
“"shall have the same meaning as assigned to them in Regulation (EU) 2024/1689"”
Designated authorities
Authority designation · 2025-10-10 · designated
Artificial Intelligence (Designation of the Malta Digital Innovation Authority) Regulations, 2025
Authority: Malta Digital Innovation Authority — market surveillance authority, single point of contact
Legal Notice 226 designates the Malta Digital Innovation Authority as market surveillance authority unless another law provides otherwise, and expressly designates MDIA as Malta's single point of contact for Regulation (EU) 2024/1689.
“"designated as the single point of contact"”
Authority designation · 2025-10-10 · designated
Artificial Intelligence (Designation of the Malta Digital Innovation Authority) Regulations, 2025
Authority: Malta Digital Innovation Authority; National Accreditation Board (Malta) — notifying authority
Legal Notice 226 designates MDIA as notifying authority for Regulation (EU) 2024/1689. The same provision says the National Accreditation Board carries out Article 28(1) assessment and monitoring tasks.
“"designated as the Notifying Authority"”
Authority designation · 2025-03-07 · designated
IDPC as FRA and MSA under the AI Act
Authority: Information and Data Protection Commissioner — market surveillance authority, fundamental-rights authority
IDPC states it was designated as Malta's AI Act fundamental-rights authority for personal-data protection. The page also states IDPC would be designated MSA for Annex III points 1, 6, 7 and 8 systems by August 2025.
“"designated as the Fundamental Rights Authority"”
Artificial Intelligence (Designation of the Malta Digital Innovation Authority) Regulations, 2025
Authority: Malta Digital Innovation Authority — sandbox operator
Legal Notice 226 makes MDIA the sole national competent authority responsible for establishing and operating Malta's national AI regulatory sandbox. The text records the legal designation rather than a separate operational call.
LN 226 makes MDIA responsible for establishment and functioning of Malta's national AI regulatory sandbox.
“"establishment and functioning of a national AI regulatory sandbox"”
Penalties (Art. 99)
Penalty regime (Art. 99) · 2025-10-10 · in-force
Artificial Intelligence (Designation of the Malta Digital Innovation Authority) Regulations, 2025
Authority: Malta Digital Innovation Authority
Legal Notice 226 gives MDIA enforcement powers and an administrative-penalty mechanism. For public authorities or bodies, the notice caps penalties at fifty thousand euro per infringement plus daily penalties for continuing infringement.
MDIA may impose public-authority administrative penalties up to €50,000 per infringement plus €50 daily penalties.
“"shall not exceed fifty thousand euro (€50,000) for each infringement"”
Authorities in the EU dataset
Not designated in Commission list— single-point-of-contact (not yet designated)source
Malta and the AI Act
Hugging Face