Legal Updates To Malta's Data Protection Regime

Official Abolishment of Notification Requirements, Third Country Data Transfers & New Regulations on Secondary Processing of Health Data

• Legal Update 1: Revocation of Certain Outdated Laws

On the 12^th November 2019, Legal Notices 296, 297 and 298 of 2019 were published. These have in scope the revocation of certain laws that were outdated and not applicable in practice, in view of the coming into force of the General Data Protection Regulation ("GDPR") back last May 2018. More specifically, the relevant Legal Notices revoked:

1. the Notification and Fees (Data Protection Act) Regulations (S.L. 586.02 of the Laws of Malta), which imposed an obligation on controllers to notify the Information and Data Protection Commissioner ("IDPC")before carrying out any wholly or partially automated or manual processing operation on personal data;