Malta - Digital Strategy (2023-2027)
Malta Digital Strategy 2023–2027
Malta
RAI-MT-NA-MDS2XXX-2022Malta - Digital Strategy (2023-2027) is Adopted in Malta as of 9 Sep 2026, according to maltadigitali.mt.
PolicyGovernance and OversightData Protection and PrivacyMalta Diġitali 2022–2027 is the national digital strategy setting Malta’s policy priorities, goals and enablers for digital transformation across society, government and the economy. It emphasises people‑centred digital public services, infrastructure, cybersecurity, data governance and skills while aligning with EU Digital Decade targets and national economic objectives.
Summary
Malta Diġitali 2022–2027 (Malta Digital Strategy 2023–2027, commonly referenced as Malta Diġitali 2022–2027) is Malta’s national strategic plan for digital transformation covering a five-year horizon. Published by the Government of Malta in November 2022, the Strategy establishes a vision of digital as a key driver for societal improvement, a more productive economy and accessible government services. The document sets out core goals and guiding principles, proposes a persona-driven approach (society, business and government), and identifies horizontal enablers such as regulation, infrastructure, funding, cybersecurity, data and digital skills.
The Strategy is non‑binding policy guidance rather than an act of primary legislation; it functions as a roadmap for public authorities, agencies and stakeholders and as a framework for aligning public investments and EU funding (including RRF/NextGenerationEU) with national digital priorities. It proposes actions to implement the Once-Only Principle, create digital registers and platforms, expand open data, strengthen research and innovation (R&I), cultivate digital innovation hubs, and promote sectoral digitalisation (including health, finance and public administration). It also directs attention to inclusive access, digital skills development, ethical and trustworthy AI, and the delivery of user-centric public services.
Implementation and governance arrangements are set out in the Strategy with the Office of the Prime Minister, relevant ministries, the Malta Digital Innovation Authority (MDIA), the Malta Information Technology Agency (MITA) and other statutory authorities playing coordination, delivery and oversight roles. The document sets measurable alignment with the EU Digital Decade targets and envisages monitoring, reporting and periodic evaluation. While the Strategy does not itself create new regulatory penalties, it signals where legislative or regulatory measures may be required to achieve objectives and references alignment with EU instruments (e.g., Data Governance Act, GDPR and the Digital Decade roadmap). Funding is expected from national resources and EU programmes, and progress is monitored through administrative reporting and sectoral strategies. The Strategy supersedes and builds upon earlier public administration digital plans (such as Mapping Tomorrow and other 2019–2021 public service digital plans) and sits alongside sectoral strategies (e.g., National Cyber Security Strategy, Public Administration Data Strategy and national R&I plans).
Full article
Read full text ↗Overview
Malta Diġitali 2022–2027 is the Government of Malta’s national digital strategy published in November 2022. The Strategy frames digital transformation as a central lever for social well‑being and economic growth: it aims to deliver accessible, user‑centric public services, competitive digital infrastructure, a strong innovation ecosystem, expanded digital skills and robust data governance. The document sets objectives at the intersection of public service reform, infrastructure investment and private‑sector enablement and explicitly aligns Malta’s trajectory with the EU Digital Decade framework. The full official text is available from the Government’s publication site and the strategy portal; see the official PDF for the complete set of goals and actions (Malta Diġitali 2022–2027 (PDF)).
Definitions
The Strategy uses a set of working definitions to ensure shared understanding across stakeholders: "digital transformation" (systemic change in services, business models and governance enabled by digital technologies); "Once‑Only Principle (OOP)" (administrative simplification where citizens/businesses provide information to government only once); "digital registers" (authoritative machine‑readable datasets supporting public services); "persona‑driven approach" (policy design that targets representative user cohorts for government, business and society); and "strategic enablers" (cross‑cutting capacities such as infrastructure, regulation, data and skills). These definitions guide the Strategy’s proposed actions and monitoring metrics, and they reference standard EU concepts used in the Digital Decade and broader EU policy frameworks.
Governance and Institutional Framework
The Strategy assigns strategic coordination roles to the Office of the Prime Minister and the relevant line ministries while identifying agencies to deliver technical, regulatory and operational components. Key implementation actors referenced include the Malta Digital Innovation Authority (MDIA), the Malta Information Technology Agency (MITA), the Malta Communications Authority (MCA) and other sectoral regulators. Institutional responsibilities are structured around: (1) policy and strategic coordination; (2) technical delivery of government digital platforms and registers; (3) regulatory alignment and standards; (4) funding and project oversight; and (5) stakeholder engagement. The Strategy sets out an implementation and governance chapter describing roles, milestones and mechanisms to mobilise public‑private partnerships and regional cooperation. Where statutory competencies lie with regulators (e.g., telecoms, data protection), the Strategy proposes coordination rather than supplanting existing regulatory powers.
Key Focus Areas
The Strategy groups actions into several priority clusters. First, Digital Government: deliver end‑to‑end digital public services, implement the OOP, create digital registers and a public service design approach that improves user journeys. Second, Infrastructure and Connectivity: sustain high capacity networks and cloud capabilities to support business and public needs. Third, Data and Trust: promote open data, data governance frameworks and interoperability, and align with EU instruments (including the Data Governance Act). Fourth, Innovation and Growth: support R&I, establish or scale digital innovation hubs and leverage funding (including RRF and cohesion funds) to back scale‑ups and startups. Fifth, Skills and Inclusion: expand digital education and lifelong learning to broaden basic digital skills and grow ICT specialist capacity. Sixth, Cybersecurity and Resilience: implement measures for national cyber resilience, threat detection and secure digital identity services. Across these areas, the Strategy emphasises ethical and human‑centred design, including early references to trustworthy AI principles.
Implementation Framework
Implementation rests on a combination of central coordination, agency delivery and sectoral ownership. The Strategy establishes project portfolios and suggests that funding, procurement and regulatory reform will be aligned to enable rapid delivery. MDIA and MITA are described as technical and innovation leads: MDIA in areas of innovation, standards, certification and emerging technologies; MITA in large scale government IT systems and infrastructure. Sector ministries are responsible for implementing digitalisation in their domains (e.g., health, finance, education). The Strategy also envisages public procurement reforms, common standards for service design and APIs, and a push for re‑usable platforms to reduce duplication. Evaluation is to be supported by measurable KPIs and periodic reporting against EU Digital Decade targets (Malta Digital Decade Strategic Roadmap).
Monitoring and Evaluation
The Strategy requires a monitoring regime tied to milestones and EU Digital Decade indicators. Annual reporting, dashboards and public progress updates are proposed to ensure transparency. Key performance areas include uptake of digital public services, coverage of high‑capacity networks, digital skills metrics, cybersecurity preparedness and R&I investment levels. The Strategy signals that some funding (national and EU) will be conditional on progress and that sectoral strategies (e.g., Public Administration Data Strategy 2023–2027, National Cyber Security Strategy 2023–2026) will provide more detailed metrics for their domains. Continuous stakeholder consultation, independent evaluation and course corrections are recommended to address bottlenecks.
Penalties, Liability, and Appeals
As a high‑level policy instrument, the Strategy itself does not prescribe new criminal or administrative penalties. Instead it identifies where existing legal frameworks and sectoral regulators retain enforcement powers (for example, data protection enforcement remains the remit of the Office of the Information and Data Protection Commissioner and telecoms compliance remains with the MCA). The Strategy notes liabilities and redress must be addressed within sectoral legislation: e.g., digital identity, payment services and health records will remain subject to existing legal safeguards including GDPR. Appeals and dispute mechanisms are to be governed by the established channels before administrative bodies and courts where sectoral laws provide for enforcement and remedies.
Relationship to Other Instruments
Malta Diġitali is deliberately horizontal: it complements and references sectoral strategies such as the National Cyber Security Strategy 2023–2026, the Public Administration Data Strategy 2023–2027, the National eSkills Strategy 2022–2025 and other R&I and education plans. It builds on earlier public service digital plans (e.g., Mapping Tomorrow) and is designed to channel EU funding streams (Recovery & Resilience Facility, cohesion policy) towards digital priorities. Where legislative change is needed to implement particular actions, the Strategy recommends targeted legal or regulatory amendments rather than substituting for primary legislation.
International Alignment
The Strategy explicitly aligns with the EU Digital Decade and the Digital Compass objectives for 2030, including goals on digital public services, connectivity, skills and ICT specialists. It references EU instruments such as the Data Governance Act and the General Data Protection Regulation as anchors for its approach to data and trust. International cooperation and adherence to EU standards are presented as critical for interoperability, cross‑border public services and participation in EU research and infrastructure initiatives (e.g., EuroHPC, Chips JU). The Strategy also frames Malta’s participation in EU networks (EDIH/DIH) and cross‑border projects as central to scaling local innovation.
Implementation Timeline
| Phase | Key Actions | Indicative Dates |
|---|---|---|
| Initiation | Publication, governance setup, priority projects identified | Nov 2022 – Q1 2023 |
| Early Delivery | Launch digital registers, OOP pilots, initial R&I and DIH funding | 2023 |
| Scale | Rollout of e‑services, connectivity upgrades, national cyber measures | 2024–2025 |
| Consolidation | KPI review, regulatory adjustments, skills scale‑up | 2025–2026 |
| Finalisation | Full evaluation and handover to next national strategy cycle | 2027 |
Sources and References
| Source | Type |
|---|---|
| Malta Diġitali 2022–2027 (official PDF) | Primary Source |
| Malta Diġitali (Strategy portal) | Primary Source |
| Malta Digital Decade Strategic Roadmap 2023–2030 | Primary / EU alignment |
Requirements for a company
What an organisation has to do under Malta - Digital Strategy (2023-2027), at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.
Must do
10- Ensure compliance with GDPR and data governance frameworks.All entities implementing digital initiatives, including AI systems.
- Implement national cybersecurity measures for resilience and threat detection.Agencies and entities deploying digital systems, including AI.
- Adopt a persona-driven approach for designing public services.All ministries and agencies developing public digital services.
- Implement the Once-Only Principle for administrative simplification in public services.Public administration entities.
- Align digital transformation initiatives with EU Digital Decade targets and KPIs.Strategy leads and relevant agencies (e.g., MDIA).
- Create and maintain authoritative machine-readable digital registers.Public administration entities.
- +4 more in the table below
Must not do
0Nothing in this category.
Should do
1- Promote ethical and human-centred design principles in digital initiatives.All entities developing and deploying digital systems, including AI.
Should not do
0Nothing in this category.
Who must do what
The obligations under Malta - Digital Strategy (2023-2027), most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | All entities implementing digital initiatives, including AI systems. | Ensure compliance with GDPR and data governance frameworks. “align with EU instruments (including the Data Governance Act)” | — | Data and Trust | Critical |
| 2 | Agencies and entities deploying digital systems, including AI. | Implement national cybersecurity measures for resilience and threat detection. “implement measures for national cyber resilience, threat detection” | 2024–2025 | Cybersecurity and Resilience | Important |
| 3 | All ministries and agencies developing public digital services. | Adopt a persona-driven approach for designing public services. “policy design that targets representative user cohorts for government, business and society” | — | Key Focus Areas | Important |
| 4 | Public administration entities. | Implement the Once-Only Principle for administrative simplification in public services. “implement the OOP, create digital registers” | 2023 | Key Focus Areas | Important |
| 5 | Strategy leads and relevant agencies (e.g., MDIA). | Align digital transformation initiatives with EU Digital Decade targets and KPIs. “explicitly aligns with the EU Digital Decade and the Digital Compass objectives for 2030” | — | International Alignment | Important |
| 6 | Public administration entities. | Create and maintain authoritative machine-readable digital registers. “create digital registers and a public service design approach” | 2023 | Key Focus Areas | Important |
| 7 | All entities handling public data. | Promote open data, data governance frameworks, and interoperability. “promote open data, data governance frameworks and interoperability” | — | Data and Trust | Important |
| 8 | Relevant agencies and funding bodies. | Support the establishment or scaling of digital innovation hubs and R&I. “establish or scale digital innovation hubs and leverage funding” | 2023 | Innovation and Growth | Important |
| 9 | Education sector and relevant agencies. | Expand digital education and lifelong learning to broaden basic digital skills. “expand digital education and lifelong learning to broaden basic digital skills” | — | Skills and Inclusion | Important |
| 10 | Strategy leads and implementing agencies. | Establish a monitoring regime with annual reporting and public progress updates. “The Strategy requires a monitoring regime tied to milestones and EU Digital Decade indicators.” | — | Monitoring and Evaluation | Important |
| 11 | All entities developing and deploying digital systems, including AI. | Promote ethical and human-centred design principles in digital initiatives. “emphasises ethical and human‑centred design, including early references to trustworthy AI principles.” | — | Key Focus Areas | Recommended |
Related Regulations
More AI regulation in Malta
© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 9 Sep 2026