Act XV of 2026 amends the Malta Financial Services Authority Act (Chapter 330) to modernise the MFSA's governance, expand its supervisory toolkit, and align Maltese financial regulation with recent EU developments including DORA (Digital Operational Resilience Act) and MiCA (Markets in Crypto-Assets Regulation). The principal changes cover four areas.

First, the MFSA Board is restructured: the Chief Executive Officer and a new Chief Supervisory Officer are separated, the Board is enlarged by two independent non-executive members with digital-finance expertise, and a formal whistleblower protection policy must be adopted within six months of commencement. Second, the MFSA acquires new product-intervention powers enabling it to prohibit or restrict the marketing of harmful financial products to retail investors on a temporary basis without prior notification, subject to review within 30 days by the Financial Services Tribunal. Third, authorisation requirements are extended to digital-asset service providers and crypto-asset issuers in accordance with MiCA implementation, with transitional arrangements for existing VFA agents and licence-holders.

Fourth, the enforcement regime is overhauled: administrative penalties are increased to the higher of €5 million or 10% of annual turnover for the most serious breaches; disgorgement of profits is introduced as a standalone remedy; and the MFSA may publish 'public censure' notices even where no fine is imposed. The Act came into force on the date of its publication.

Malta Financial Services Authority (Amendment) Act (Act XV of 2026)