Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 17 SEPTEMBER 2026

Malta Implements National Framework For The EU Cyber Resilience Act

Fenech Farrugia Fiott Legal (FFL)
Explore more from Fenech Farrugia Fiott Legal (FFL)

Malta has published Legal Notice 238 of 2026, establishing the national regulatory framework for the EU's Cyber Resilience Act and designating the Malta Digital Innovation Authority as the central enforcement body. With vulnerability reporting obligations already in effect since September 11, 2026, manufacturers of digital products must now navigate new compliance requirements ahead of the regulation's full application in December 2027.

MaltaTechnology
Mark Mamo
Mark Mamo
Author LinkedIn connections

Legal Notice 238 of 2026

On 11th of September 2026, Malta published Legal Notice 238 of 2026 – Cyber Resilience Regulations, 2026 (the “Regulations”) in Government Gazette No. 21,717, establishing the national regulatory and enforcement framework for the application of Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements, commonly referred to as the Cyber Resilience Act (“CRA”).

The CRA establishes EU-wide cybersecurity requirements for hardware and software products made available on the European Union market. Although the CRA is directly applicable in Malta and therefore does not require transposition in the same manner as an EU Directive, the new Regulations provide the institutional, supervisory and enforcement mechanisms required for its effective application at national level.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

EU AI Act Update: What Will Apply From 2 August 2026 And What Is Being Postponed?

The Council of the European Union has reached a provisional agreement on the Digital Omnibus Regulation, introducing significant amendments to the EU AI Act that will reshape compliance timelines and expand prohibited practices. Key changes include postponing high-risk AI system obligations to December 2027, accelerating transparency requirements for AI-generated content, and introducing new bans on non-consensual intimate imagery generation.
MaltaTechnology
Mamo TCV Advocates
Mamo TCV Advocates
Article

EU Reaches Compromise On PSD3 And PSR: Tighter Harmonisation, Crypto Rules And Stronger Consumer Transparency.

The European Union has reached a compromise on the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR), introducing sweeping changes to harmonise payment rules across Member States. The package addresses fragmentation under PSD2 by migrating conduct-of-business rules into directly applicable regulations, while introducing new provisions on cash access, cryptocurrency payment services, fraud liability, and open banking.
European UnionTechnology
WH Partners
WH Partners
Article

The Enforcement Shift: Why Cyber-Negligence In Malta Now Carries Direct Liability

Recent legislative changes in Malta have fundamentally transformed cybersecurity from a technical IT concern into a critical matter of corporate governance and legal liability. With the introduction of Legal Notice 89 of 2026 and the rise of AI-enabled cyber threats, organizations now face direct enforcement mechanisms and heightened expectations for cyber-risk management that can expose both companies and their directors to significant consequences.
MaltaTechnology
GVZH Advocates
GVZH Advocates
Article

Legal Letter, Judicial Letter Or Article 166A Letter? Understanding The Difference

Maltese legal practice employs three distinct instruments—legal letters, judicial letters, and sworn judicial letters under Article 166A—each serving different purposes and producing different legal effects. Understanding when to use each instrument requires careful assessment of the claim's nature, value, and whether formal court proceedings or executive enforcement is necessary. The choice between these tools can determine whether a creditor obtains an executive title without litigation or mus
MaltaLitigation, Mediation & Arbitration
Fenech Farrugia Fiott Legal (FFL)
Fenech Farrugia Fiott Legal (FFL)