Artificial Intelligence Regulations, 2025 (L.N. 226 of 2025)
Legal Notice 226 of 2025, Government Gazette of Malta No. 21,519 (10 October 2025)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force 11 months, effective 10 October 2025.
An AI risk obligations rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Expect the Malta Digital Innovation Authority (MDIA) to hold market-surveillance and enforcement jurisdiction, from 2 August 2026, over a high-risk AI system you provide or deploy in Malta that falls outside the Information and Data Protection Commissioner's Annex III categories, under Legal Notice 226 of 2025.
- A provider testing an innovative AI system inside the MDIA's AI regulatory sandbox remains liable for damage the system causes, but is protected from administrative fines while acting in good faith, under the same Legal Notice.
What it reaches
Obligation class
Governance
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Legal Notice 226 of 2025 was published in Government Gazette of Malta No. 21,519 of 10 October 2025. It designates the Malta Digital Innovation Authority (MDIA) as Malta's lead market surveillance authority, single point of contact, and national competent authority for establishing and operating Malta's AI regulatory sandbox under the EU AI Act.
The MDIA's market-surveillance and enforcement powers become exercisable from 2 August 2026, in line with the AI Act's own Article 113 application timeline. A provider testing an AI system inside the MDIA's sandbox remains liable for damage the system causes but is protected from administrative fines while acting in good faith.
When LexLint raises it
high_risk_decisions
Read the law
Malta Digital Innovation Authority, official guidance page
legislation.mt, Government Gazette of Malta No. 21,519