Law note · Malta
GDPR Articles 82-83 and IDPC Enforcement in Malta
cite Regulation (EU) 2016/679, Arts. 82-83
stage In effect
since 2018-05-25
reviewed 2026-08-24
The IDPC is the supervisory authority and enforces General Data Protection Regulation (GDPR) fines up to EUR 20 million or 4 percent of global annual turnover, per secondary commentary. No Malta-specific fine ceiling distinct from the GDPR Article 83 maximum was identified in this pass. GDPR Article 82 gives any person who suffered material or non-material damage a right to compensation from the controller or processor.
What it asks of an app
- Expect the IDPC to have jurisdiction and fining power over your processing of personal data of a person in Malta, up to the General Data Protection Regulation (GDPR) Article 83 tiers.
- Expect any person who suffered material or non-material damage from an infringement to have a direct right to claim compensation from you as controller or processor, under GDPR Article 82.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, high_risk_decisions, processes_biometrics, processes_voice
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679