MLT GVT DORA Implementation Rules


On Jul. 16, MLT GVT issued digital operational resilience regulations.


  • MLT GVT published Regulation 166 of 2024 Malta Financial Services Authority Act (digital operational resilience act (DORA)) Regulations, 2024, effective Jan. 17, 2025.
  • Follows EU CNCL Dec. 2022 final Dir 2022/2556 and Reg 2022/2554 on digital operational resilience for the financial sector in the Official Journal, see #137568.
  • Follows MLT FSA Jan. 2024, consulted on DORA implementation, see #198163.
  • Summary
  • The regulation designates MLT FSA as competent authority in Malta for implementing the relevant provisions of the DORA regulation and for ensuring regulatory compliance.
  • MLT FSA will exercise all functions, obligations and powers; includes receiving reports on major ICT-related incidents, and voluntary notifications of significant cyber threats.
  • Will have powers to disclose reports/notifications to any other relevant body/authority.
  • In the event of conflict between any regulations, provisions of DORA regulation prevail.
  • Regulations cover areas including: credit rating agencies; OTC derivatives, central counterparties/trade repositories; ECB credit institution supervision; benchmarks in financial instruments, contracts, or to measure the performance of investment funds.
  • Effectiveness
  • The regulations come into force on Jan. 17, 2025.

Regulators MLT FSA; MLT GVT
Entity Types B/D; Bank; CNSM; CRA; Depo; Exch; IA; Ins; Inv Co; MSB; OTC; Pension; Thrift
Reference OG 21,285, Reg 166 of 2024; 7/16/2024; DORA Dir 2022/2556, Reg 2022/2554; Citation: Regulation 166 of 2024;
Functions AML; BCS; Compliance; Cyber; Financial; Legal; Operations; Outsourcing; Privacy; Product Design; Record Retention; Reporting; Resolution; Risk; Technology; Treasury
Countries Malta
Category
State
Products Banking; Cards; CRA; Cryptocurrency; Custody; Derivatives; Equity; Fixed Income; Fund Mgt; Hedge Funds; Insurance; Payments; Pensions; Securities
Regions EMEA
Rule Type Final
Rule Date 7/16/2024
Effective Date 1/17/2025
Rule Id 219715
Linked to Rule :198163
Reg. Last Update 7/16/2024
Report Section EU

Last substantive update on 07/19/2024