2025-05-20
Added · Updated
The Malta Financial Services Authority has published legislative measures to nationally transpose the DORA Amending Directive into Maltese law. These measures include eight specific legal notices and an act amending existing financial services, banking, and investment services regulations. The circular also confirms that corresponding amendments to the Authority's supervisory rules have been published to ensure full regulatory alignment.
Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt Transposition of Directive (EU) 2022/2556 on Digital Operational Resilience for the Financial Sector – Legislative Measures This circular is an update to Circular titled Regulation (EU) 2022/2554 and Amending Directive (EU) 2022/2556 on Digital Operational Resilience for the Financial Sector published on the EU Official Journal published by the Authority in January 2023. As detailed by the latter circular, Regulation (EU) 2022/2554 (the ‘DORA Regulation’) is accompanied by Directive (EU) 2022/2556 (the ‘DORA Amending Directive’). Following the Consultation Document on the National Implementation of Regulation (EU) 2022/2554 and Transposition of Directive (EU) 2022/2556 on Digital Operational Resilience for the Financial Sector, the necessary legislative legal measures which nationally transpose the DORA Amending Directive have now been published. The published legislative legal measures are as follows:
Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt 8. Act No. XI of 2025 Various Financial Services Laws (Amendment) Act, 2025 (access here). The necessary amendments to the Authority’s rules by virtue of the transposition of the DORA Amending Directive have also been published, as detailed under Circular titled Transposition of Directive (EU) 2022/2556 on Digital Operational Resilience for the Financial Sector – Amendments to the Authority’s Rules, published by the Authority in December 2024. Authorised Persons may request further information by sending an email to the Supervisory ICT Risk and Cybersecurity function on sirc@mfsa.mt.