The implementation of the Data Act (Regulation (EU) 2023/2854)
has entered a decisive phase across EU Member States, with national
measures now in force to ensure compliance and effective
enforcement. Malta has emerged as one of the first jurisdictions to
establish clear competences and sanctioning powers under the Data
Act – enforcement is now a reality. Germany has also taken a
significant step forward in the implementation by publishing a new
draft implementation act on 29 October 2025.
Designated Competent Authorities and Enforcement Regime in
Malta
In Malta, the competent authorities tasked with monitoring and
enforcing the Data Act have been designated.
The Malta Digital Innovation Authority (MDIA) is the data
coordinator and competent authority for the application and
enforcement of all provisions of the Data Act, except for Articles
23–31 and 34–35. This designation is established by
Legal Notice 222 of 2025.
