Malta - National AI Strategy

Malta — The Ultimate AI Launchpad: A Strategy and Vision for Artificial Intelligence in Malta 2030

Malta

RAI-MT-NA-MUALSXX-2019
Effective: October 3, 2019
In Force(In Force)
PolicyGovernance and OversightConformity Assessment and RegistrationRisk Management
Export PDF

Launched October 2019, Malta’s national AI strategy — 'The Ultimate AI Launchpad' — sets a vision for Malta to become an AI testbed and scale hub by 2030. The strategy establishes three pillars (investment/startups, public sector adoption, private sector adoption) and three enablers (education & workforce, legal & ethical framework, ecosystem infrastructure), together with a national AI certification programme and a 72-action short-term plan.

Overview

Malta’s national AI strategy, "Malta — The Ultimate AI Launchpad: A Strategy and Vision for Artificial Intelligence in Malta 2030," was launched in October 2019 to position Malta as a compact, test-friendly jurisdiction that supports development, prototyping, testing and scaling of AI systems. The strategy frames Malta as an attractive launchpad for local and foreign organisations by combining incentives for investment, regulatory experimentation and an active certification programme. The document (published by the Malta Digital Innovation Authority) articulates three vertical pillars — Investment, Start-ups & Innovation; Public Sector Adoption; and Private Sector Adoption — and three enablers — Education & Workforce; Legal & Ethical Framework; and Ecosystem Infrastructure. The MDIA is assigned responsibility for monitoring and governance of the strategy and for administering the national AI certification programme. For the original strategy document, see Malta — The Ultimate AI Launchpad (PDF) and the MDIA national-strategies overview at MDIA - Strategy and Vision for AI in Malta 2030.

Definitions

The strategy adopts working definitions to ensure clarity across public and private actors. "Artificial Intelligence" is framed broadly to include machine learning, expert systems, symbolic AI, statistical and probabilistic models and emerging generative systems. "AI system" refers to software and systems which process data, make predictions, recommendations or automated decisions. "Certification" denotes the voluntary national programme administered by MDIA whereby registered Systems Auditors assess AI systems against ethical and transparency criteria set out in Malta’s Ethical AI Framework. "High-impact system" is used in the strategy to identify use-cases where failures could materially affect safety, fundamental rights, or core public functions; these cases are subject to strengthened assurance measures. The strategy aligns definitions with European initiatives and data protection concepts to facilitate interoperability with EU frameworks.

Governance and Institutional Framework

The strategy designates the Malta Digital Innovation Authority as the primary governance body responsible for coordination, oversight and administration of the national AI programme, including the AI certification scheme and working groups. MDIA’s role includes stakeholder engagement, registering and accrediting Systems Auditors, maintaining a national AI portal, and publishing progress updates. Responsibility for sectoral deployment remains with line ministries and regulators — e.g., the Health Ministry for clinical pilots, the Ministry for Transport for traffic management pilots — while MDIA provides cross-cutting standards and guidance. The launch was announced by the Parliamentary Secretary for Financial Services, Digital Economy and Innovation, and the strategy envisions collaboration with national bodies (such as the Malta Information Technology Agency) and international partners. The MDIA has also signalled a strategy realignment process (scheduled for completion in 2025) to update priorities in response to technological, legal and societal changes. Key governance documents and announcements are available via the MDIA portal (MDIA AI Strategy) and the government press release for the October 2019 launch (Gov.mt press release, 3 Oct 2019).

Key Focus Areas

The strategy identifies multiple interlocking focus areas to catalyse AI adoption while managing risks. Investment & Start-ups: incentives, incubation, access to finance and a streamlined regulatory environment to attract startups and R&D. Public Sector Adoption: pilot projects and procurement pathways to adopt AI across service delivery, including traffic management, education, customer service, tourism and utilities. Private Sector Adoption: support for SMEs and larger firms to adopt AI solutions to increase competitiveness. Education & Workforce: national upskilling initiatives, AI literacy for citizens, and specialised programmes to develop AI talent, including collaboration with vocational institutions (e.g., MCAST). Legal & Ethical Framework: a Malta Ethical AI Framework and the AI certification process to promote transparency, explainability and human oversight. Ecosystem Infrastructure: development of testbeds, data governance arrangements and supportive cloud/edge compute infrastructure. The strategy lists some 72 action points and six demonstrator projects covering targeted sectors to be implemented in the short term (2019–2022) while the broader aim extends to 2030. Each focus area is designed to be inclusive and aligned with existing EU regulatory obligations, notably data protection principles under GDPR, and to facilitate interoperability with EU-level AI governance tools.

Implementation Framework

Implementation relies on a mix of voluntary and incentivised measures, public procurement as a demand driver, certification and standards, and cross-ministerial coordination. MDIA is responsible for monitoring progress and for registering Systems Auditors that perform assessments against the Ethical AI Framework. The strategy recommends the use of a national AI portal to publish guidance, registries and tracking dashboards for the 72 action points. Public procurement processes are adapted to prioritise ethically aligned AI solutions and to support pilot-project scaling. The strategy also calls for targeted funding instruments, partnerships with academia and incubation support to accelerate commercialisation. Implementation emphasises a pragmatic, risk-based approach to oversight, focusing assurance resources on high-impact systems and use-cases while encouraging experimentation in lower-risk contexts.

Monitoring and Evaluation

The strategy sets out monitoring mechanisms that combine MDIA-led reporting, progress dashboards and stakeholder engagement. MDIA is required to publish implementation updates and to maintain a public-facing portal with status indicators for the 72 action points. The strategy envisages regular evaluation cycles and performance indicators that track: number of AI startups, levels of investment, public sector AI deployments, certified systems and adoption of national standards. MDIA’s monitoring is designed to inform the 2025 realignment and to provide evidence for future regulatory adjustments. External reviews and engagement with international evaluators (OECD, EU AI Watch) are also anticipated as part of quality assurance and benchmarking exercises.

Penalties, Liability, and Appeals

As a strategic policy document rather than a standalone statute, the Strategy does not itself prescribe criminal sanctions. It does, however, establish administrative levers: the certification regime provides market-based enforcement (suspension or revocation of certification) and delisting from public procurement preference for non-compliant systems. The strategy explicitly links to existing legal regimes for liability and redress — notably data protection (GDPR) enforcement by the Office of the Information and Data Protection Commissioner — and anticipates sectoral regulators applying existing enforcement powers where relevant (e.g., health sector regulators for clinical safety). Systems Auditors and MDIA processes are expected to include appeals and remediation pathways, with escalation to relevant administrative and judicial remedies under Maltese law where applicable.

Relationship to Other Instruments

The national strategy is positioned to complement and align with EU initiatives (the Coordinated Plan on AI, EU AI Act preparatory work) and international guidance (OECD principles). It references Malta’s Ethical AI Framework and other national documents such as digital strategies, skills plans and public administration data strategies. Where statutory obligations exist (for example, GDPR obligations on personal data processing), the strategy explicitly defers to those requirements and aims to operationalise them in an AI context. The MDIA acts as a coordination node to ensure that sectoral rules and the national AI agenda are aligned and to prevent regulatory fragmentation.

International Alignment

From its inception the Malta AI Strategy emphasises international interoperability and alignment with EU and OECD instruments. The strategy explicitly seeks to create an environment receptive to international investment and cross-border testing by aligning definitions, certification approaches and ethical expectations with recognised international standards and platforms. Malta’s approach has been documented by international bodies — for example OECD and the EU AI Watch — as an early national-level policy focused on a market-friendly AI certification approach coupled with ethical safeguards. The strategy anticipates ongoing coordination with EU bodies to ensure compatibility with the evolving EU legal framework for AI and data protection, and to support Maltese actors participating in cross-border pilots and research collaborations.

Implementation Timeline

MilestonePlanned/Actual DateNotes
Public launch of Strategy2019-10-03Launched at Delta Summit; Parliamentary Secretary announcement (press release).
Short-term action window (72 actions)2019-2022Implementation window for initial action points and demonstrator projects.
MDIA oversight assignment2019-10-2019 Q4MDIA assigned monitoring and certification responsibilities.
National AI certification programme operational (pilot)2019-2020Initial certification infrastructure and Systems Auditor registration commenced.
Strategy realignment processScheduled completion 2025MDIA-led re-alignment and stakeholder engagement to update the strategy.

Compliance Checklist

RequirementApplicable Actors
Register for national AI certification (where seeking certification)AI developers, vendors, integrators
Adopt Ethical AI Framework guidancePublic-sector procurers, systems auditors, private deployers
GDPR & data protection complianceAny system processing personal data
Engage MDIA for cross-cutting guidance and auditingLine ministries, regulated entities, startups
Follow public procurement provisions favouring certified AIPublic-sector contracting authorities

Sources and References

SourceType
Malta — The Ultimate AI Launchpad: A Strategy and Vision for Artificial Intelligence in Malta 2030 (Full text PDF)Primary Source
Plain English

Malta's national Artificial Intelligence (AI) strategy, launched in October 2019, aims to establish the island nation as a leading hub for developing, testing, and scaling AI systems by 2030. It applies to both local and foreign organizations, including developers, vendors, and integrators, across public and private sectors.

The strategy encourages investment and innovation, promotes AI adoption across public and private sectors, and focuses on building a skilled workforce and robust infrastructure. A key component is the voluntary national AI certification program, administered by the Malta Digital Innovation Authority (MDIA), which assesses systems against ethical and transparency criteria outlined in Malta’s Ethical AI Framework. While voluntary, certification offers advantages, such as preference in public procurement. Crucially, any AI system handling personal data must also comply with existing data protection laws, especially the General Data Protection Regulation (GDPR).

The strategy launched in October 2019, kicking off an initial 72-action short-term plan that ran until 2022. The MDIA took on oversight and launched the pilot phase of the national AI certification program in 2019-2020.

As a strategic policy, this framework does not impose direct criminal penalties. However, non-compliance within the certification program can lead to administrative consequences, such as suspension or revocation of certification or exclusion from public procurement opportunities. Broader enforcement, particularly for data privacy, falls under existing legal regimes like GDPR, overseen by the Office of the Information and Data Protection Commissioner.

A key practical consideration is the strategy's dynamic nature: the MDIA is currently realigning its priorities, with this update scheduled for completion in 2025, to adapt to evolving technology and societal needs. This means the framework will likely evolve, requiring ongoing attention from anyone operating in Malta's AI ecosystem.

Plain-English rewrite by Regulations.ai — not legal advice. Verify against the official text.

What you must do — compliance checklist

0 / 7 marked complete

Plain-English obligations under Malta - National AI Strategy. Not legal advice — verify against the official text before relying on it.

  1. #1CriticalRelationship to Other Instruments

    Applies to: Any entity processing personal data with AI systems.

    Where statutory obligations exist (for example, GDPR obligations on personal data processing), the strategy explicitly defers to those requirements.
  2. #2ImportantPenalties, Liability, and AppealsBefore placing on market

    Applies to: AI developers, vendors, and integrators seeking certification.

    The certification regime provides market-based enforcement (suspension or revocation of certification) and delisting from public procurement preference for non-compliant systems.
  3. #3ImportantKey Focus Areas

    Applies to: Providers and deployers of AI systems, especially high-impact systems.

    a Malta Ethical AI Framework and the AI certification process to promote transparency, explainability and human oversight.
  4. #4ImportantDefinitionsBefore deployment

    Applies to: Providers and deployers of high-impact AI systems.

    these cases are subject to strengthened assurance measures.
  5. #5ImportantImplementation Framework

    Applies to: Public-sector contracting authorities.

    Public procurement processes are adapted to prioritise ethically aligned AI solutions and to support pilot-project scaling.
  6. #6RecommendedCompliance Checklist

    Applies to: Line ministries, regulated entities, and startups developing AI.

    Engage MDIA for cross-cutting guidance and auditing.
  7. #7RecommendedDefinitions

    Applies to: Providers and deployers of AI systems in Malta.

    The strategy aligns definitions with European initiatives and data protection concepts to facilitate interoperability with EU frameworks.

© Regulations.AI — created on 13-Jun-2026