Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 28 JANUARY 2026

NIS 2 And Critical Entities Resilience Framework Enter Into Force In Malta

Mamo TCV Advocates
Mamo TCV Advocates
Contributor
Mamo TCV Advocates

Mamo TCV Advocates

Mamo TCV Advocates is one of Malta’s leading law firms, with significant depth and expertise across...

View firm profile
Explore more from Mamo TCV Advocates

Two long-awaited Legal Notices published on Friday, 23rd January 2026 have brought into force key elements of Malta's cybersecurity and resilience framework, implementing two recent EU legislative developments.

MaltaTechnology
Mamo TCV Advocates
Mamo TCV Advocates
Author LinkedIn connections

Two long-awaited Legal Notices published on Friday, 23rd January 2026 have brought into force key elements of Malta's cybersecurity and resilience framework, implementing two recent EU legislative developments.

Entry Into Force of the NIS 2 Directive

Legal Notice 22 of 2026 brought Subsidiary Legislation 460.41, the Measures for a High Common Level of Cybersecurity Across the European Union (Malta) Order, into force on Friday, 23rd January 2026. This Subsidiary Legislation transposes the EU Network and Information Systems Directive II (more commonly known as 'NIS 2') into Maltese law and is brought into force as already previously published without substantial substantive amendments following a consultation process that previously took place.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Malta Implements National Framework For The EU Cyber Resilience Act

Malta has published Legal Notice 238 of 2026, establishing the national regulatory framework for the EU's Cyber Resilience Act and designating the Malta Digital Innovation Authority as the central enforcement body. With vulnerability reporting obligations already in effect since September 11, 2026, manufacturers of digital products must now navigate new compliance requirements ahead of the regulation's full application in December 2027.
MaltaTechnology
Fenech Farrugia Fiott Legal (FFL)
Fenech Farrugia Fiott Legal (FFL)
Article

EU AI Act Update: What Will Apply From 2 August 2026 And What Is Being Postponed?

The Council of the European Union has reached a provisional agreement on the Digital Omnibus Regulation, introducing significant amendments to the EU AI Act that will reshape compliance timelines and expand prohibited practices. Key changes include postponing high-risk AI system obligations to December 2027, accelerating transparency requirements for AI-generated content, and introducing new bans on non-consensual intimate imagery generation.
MaltaTechnology
Mamo TCV Advocates
Mamo TCV Advocates
Article

EU Reaches Compromise On PSD3 And PSR: Tighter Harmonisation, Crypto Rules And Stronger Consumer Transparency.

The European Union has reached a compromise on the Payment Services Directive 3 (PSD3) and Payment Services Regulation (PSR), introducing sweeping changes to harmonise payment rules across Member States. The package addresses fragmentation under PSD2 by migrating conduct-of-business rules into directly applicable regulations, while introducing new provisions on cash access, cryptocurrency payment services, fraud liability, and open banking.
European UnionTechnology
WH Partners
WH Partners
Article

The Enforcement Shift: Why Cyber-Negligence In Malta Now Carries Direct Liability

Recent legislative changes in Malta have fundamentally transformed cybersecurity from a technical IT concern into a critical matter of corporate governance and legal liability. With the introduction of Legal Notice 89 of 2026 and the rise of AI-enabled cyber threats, organizations now face direct enforcement mechanisms and heightened expectations for cyber-risk management that can expose both companies and their directors to significant consequences.
MaltaTechnology
GVZH Advocates
GVZH Advocates
Article

EU Commission Classifies ChatGPT As A Search Engine: A Brief Look At What This Means

The European Commission has designated OpenAI's ChatGPT as a Very Large Online Search Engine, while Roblox and Reddit have been classified as Very Large Online Platforms under the Digital Services Act. These designations mark a significant development in EU digital regulation, particularly for AI systems, as all three services must now comply with stringent requirements including risk assessments, content moderation, and independent audits within four months.
European UnionMedia, Telecoms, IT, Entertainment
Mamo TCV Advocates
Mamo TCV Advocates
Article

Strengthening EU Air Passenger Rights: The 2026 Reform Explained

The European Union has agreed on a major legislative reform to Regulation (EC) No 261/2004, introducing significant changes to air passenger rights across the EU. Set to enter force in August 2027, the reform strengthens existing protections while introducing new obligations for airlines, including proactive notification duties, enhanced rerouting requirements, and expanded protections for passengers with reduced mobility.
MaltaTransport
Mamo TCV Advocates
Mamo TCV Advocates
Article

No Free Rides On Reputed Marks: The CJEU’s Balancing Act Between Trademark Rights And Political Expression In Inter IKEA Systems v Vlaams Belang

The Court of Justice of the European Union has delivered a landmark ruling on whether political parties may invoke freedom of expression to justify using reputed trademarks in their campaigns. When Belgian political party Vlaams Belang adopted the IKEA trademark for its immigration reform programme, Inter IKEA Systems challenged the use, forcing European courts to balance intellectual property rights against fundamental freedoms. The judgment establishes a nuanced framework requiring case-by-case assessment
BelgiumIntellectual Property
Mamo TCV Advocates
Mamo TCV Advocates
Article

EU AI Act Update: What Will Apply From 2 August 2026 And What Is Being Postponed?

The Council of the European Union has reached a provisional agreement on the Digital Omnibus Regulation, introducing significant amendments to the EU AI Act that will reshape compliance timelines and expand prohibited practices. Key changes include postponing high-risk AI system obligations to December 2027, accelerating transparency requirements for AI-generated content, and introducing new bans on non-consensual intimate imagery generation.
MaltaTechnology
Mamo TCV Advocates
Mamo TCV Advocates
Article

EU Guidance Note For Pleasure Boats And Aircraft

The European Commission has issued its first-ever guidance document specifically addressing the VAT and customs status of privately owned pleasure boats and aircraft within the EU. This comprehensive guidance establishes a presumption of Union status for recreational craft, clarifies scenarios where temporary exits don't trigger loss of status, and outlines relief provisions for returned goods and temporary importation procedures for non-EU vessels.
European UnionTax
Mamo TCV Advocates
Mamo TCV Advocates