Share on LinkedInShare on LinkedIn

ARTICLE · 19 MAY 2025

Market Intelligence Thought Leadership Award Winner

EBA Sets Criteria For When Crypto-Asset Service Providers Must Appoint A Central Contact Point

BDO Malta
Explore more from BDO Malta

The European Banking Authority (EBA) has published new draft Regulatory Technical Standards (RTS) that define the conditions under which crypto-asset service providers (CASPs) are required to appoint a central contact point (CCP).

MaltaTechnology
Jianni Grima
Jianni Grima
Author LinkedIn connections

The Malta Financial Services Authority (MFSA) has issued a 'Dear CEO' letter highlighting the current state of websites operated by licensed Crypto-Asset Service Providers (CASPs). This letter follows a comprehensive supervisory review, carried out during Q1 2025, which assessed the clarity, accuracy, and regulatory compliance of online content published by licensed CASPs.

Several areas were identified where firms fell short of their obligations under the Markets in Crypto-Assets Regulation (MiCA) and related national legislation.

The findings prompted the MFSA to outline specific expectations across six key areas:

1. Website Complexity and Usability

Many websites were found to be overly complex in design and difficult to navigate, particularly global platforms serving multiple jurisdictions. CASPs are expected to streamline their websites and enhance clarity to improve user experience and accessibility.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Malta Implements National Framework For The EU Cyber Resilience Act

Malta has published Legal Notice 238 of 2026, establishing the national regulatory framework for the EU's Cyber Resilience Act and designating the Malta Digital Innovation Authority as the central enforcement body. With vulnerability reporting obligations already in effect since September 11, 2026, manufacturers of digital products must now navigate new compliance requirements ahead of the regulation's full application in December 2027.
MaltaTechnology
Fenech Farrugia Fiott Legal (FFL)
Fenech Farrugia Fiott Legal (FFL)
Article

EU AI Act Update: What Will Apply From 2 August 2026 And What Is Being Postponed?

The Council of the European Union has reached a provisional agreement on the Digital Omnibus Regulation, introducing significant amendments to the EU AI Act that will reshape compliance timelines and expand prohibited practices. Key changes include postponing high-risk AI system obligations to December 2027, accelerating transparency requirements for AI-generated content, and introducing new bans on non-consensual intimate imagery generation.
MaltaTechnology
Mamo TCV Advocates
Mamo TCV Advocates
Article

The Enforcement Shift: Why Cyber-Negligence In Malta Now Carries Direct Liability

Recent legislative changes in Malta have fundamentally transformed cybersecurity from a technical IT concern into a critical matter of corporate governance and legal liability. With the introduction of Legal Notice 89 of 2026 and the rise of AI-enabled cyber threats, organizations now face direct enforcement mechanisms and heightened expectations for cyber-risk management that can expose both companies and their directors to significant consequences.
MaltaTechnology
GVZH Advocates
GVZH Advocates