Guidelines and FAQ on Data Protection Officers Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Guidelines on CCTV and Data Protection Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Exercise your rights for SIS II Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Visa Information System (VIS) Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Data Protection for Individuals - Your Rights Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
Disclosure of health data in the context of occupational medicine and assessment of working capacity Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

b

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

b

Submit a FOI complaint

Submit a Freedom of Information complaint.

b
risk assess

Online Self-Assessment Compliance Tool

Find out how to use our online self-assessment compliance tool to indicate risks of non-compliance with the GDPR.

Information and Data Protection Appeals Tribunal 

Click here for more information about your right to file an appeal from a decision of the Commissioner and the guidelines to file such an appeal.

decision

Decisions


This section lists information about the legally binding decisions taken by the Commissioner.

Latest News & Publications

Simplification of record-keeping obligation: EDPB and EDPS adopt letter to EU Commission

Simplification of record-keeping obligation: EDPB and EDPS adopt letter to EU Commission 09 May 2025 The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a letter, addressed to the European Commission, on the upcoming proposal on the simplification of record-keeping obligation under the GDPR, amounting to a targeted amendment of […]

09
May

Read More b

European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions

European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions 06 May 2025 During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO). In addition, the Board adopted an opinion on the European Commission’s […]

08
May

Read More b

Publications

EDPB annual report 2024: protecting personal data in a changing landscape

EDPB annual report 2024: protecting personal data in a changing landscape 22 April 2025 Brussels, 23 April  - The European Data Protection Board (EDPB) has published its 2024 Annual Report. The report provides an overview of the EDPB work carried out in 2024 and reflects on important milestones, such as the adoption of the 2024-2027 strategy, […]

23
Apr

Read More b

Meta to Use Facebook and Instagram Personal Data for AI Training – GDPR rights and considerations

Meta to Use Facebook and Instagram Personal Data for AI Training – GDPR rights and considerations 22 April 2025 Background From the end of May 2025, Meta (the parent company of Facebook and Instagram) plans to use data shared by adult users in Europe—including posts, photos, and comments, past and future—to train its artificial intelligence […]

22
Apr

Read More b

EDPB adopts guidelines on processing personal data through blockchains and is ready to cooperate with AI office on guidelines on AI Act and EU data protection law

EDPB adopts guidelines on processing personal data through blockchains and is ready to cooperate with AI office on guidelines on AI Act and EU data protection law 15 April 2025 During its April 2025 plenary, the European Data Protection Board (EDPB) has adopted guidelines on processing of personal data through blockchain technologies.  A blockchain is […]

15
Apr

Read More b

IDPC issues FAQs on Management of Employee Email Accounts (Post-Departure)

IDPC issues FAQs on Management of Employee Email Accounts (Post-Departure) 11 April 2025 The IDPC has published a set of FAQs on the management of employee email Accounts once an employee leaves an organisation. When this happens, questions often arise regarding the appropriate management of their work email account. While employers have a legitimate interest […]

11
Apr

Read More b

Commission sets course for Europe’s AI leadership with an ambitious AI Continent Action Plan

Commission sets course for Europe's AI leadership with an ambitious AI Continent Action Plan 09 April 2025 The European Commission has presented an AI Continent Action Plan to make Europe a global leader in AI, boost its innovation capabilities and encourage adoption. As set out by President von der Leyen at the AI Action Summit […]

09
Apr

Read More b

The Commissioner imposed an administrative fine of €20,000 on a private clinic

The Commissioner imposed an administrative fine of €20,000 on a private clinic 07 April 2025 The Commissioner received a complaint regarding the unlawful processing and disclosure of personal data by the controller. The complainant alleged that the controller failed to update her residential address, resulting in the disclosure of her sensitive health data to third […]

07
Apr

Read More b

IDPC official delivers educational talk on Personal Data Breaches

IDPC official delivers educational talk on Personal Data Breaches 24 March 2025 The Office of the Information and Data Protection Commissioner was recently invited by ISACA Malta Chapter to deliver an educational talk. The topic selected for this session was ‘Navigating Security Incidents that lead to Personal Data Breaches from a GDPR perspective’. As the […]

24
Mar

Read More b

IDPC official addresses Employment 360 Conference

IDPC official addresses Employment 360 Conference 17 March 2025 The Office of the Information and Data Protection Commissioner took part in a panel discussion as part of the Employment 360 conference organised by Fenech and Fenech Advocates and Shireburn Software. Moderated by Dr Paul Gonzi and Ms Mikela Fenech Pace, this panel explored invaluable insights […]

17
Mar

Read More b

EDPB adopts statement on the implementation of the PNR directive

EDPB adopts statement on the implementation of the PNR directive 14 March 2025 During its March Plenary, the EDPB has adopted a statement on the on the implementation of the passenger name record (PNR) directive.In its statement, the Board:- gives further guidance to the passenger information units on the necessary adaptions and limitations to the […]

14
Mar

Read More b
Load More