Operating a compliant commercial entity in Malta requires active oversight of MBR corporate filings, Ultimate Beneficial Ownership (UBO) reporting, annual audited financial statement submissions, FIAU AML/CFT risk evaluations for subject persons, and data protection compliance with the IDPC.
Key Legal Takeaways
- UBO declarations must be updated within 14 days of any change in ultimate beneficial shareholding or control.
- Annual returns and audited financial reports must be submitted within the statutory window post-financial year end.
- Regulated and subject persons must complete annual Risk Evaluation Questionnaires (REQ) for the FIAU.
- Data controllers must uphold GDPR principles including lawful basis for processing, records of processing, and breach notification protocols.
What are the Statutory Corporate Filing Deadlines?
Under the Companies Act, every registered company must prepare and lodge an Annual Return within 42 days of the company's registration anniversary date. Audited accounts must be presented at the Annual General Meeting (AGM) and delivered to the MBR within 10 months from the close of the financial year (for private companies).
Late filings trigger automatic daily administrative penalties payable to the Registrar of Companies.
Ultimate Beneficial Ownership (UBO) Reporting
Maltese companies must maintain and register accurate information regarding their beneficial owners holding directly or indirectly more than 25% ownership or control. Any change in shareholding, voting rights, or governing directors must be submitted via Form BO within 14 days.
AML/CFT Compliance and the FIAU
Entities categorized as Subject Persons (e.g. corporate service providers, trustees, gaming operators, financial institutions) must formulate comprehensive Business Risk Assessments (BRA) and Customer Risk Assessments (CRA) in compliance with FIAU guidelines.
Official Maltese Statutory References & Sources
- Companies Act (Register of Beneficial Owners) Regulations (S.L. 386.19)
- Prevention of Money Laundering Act (Chapter 373 of the Laws of Malta)
- General Data Protection Regulation (EU) 2016/679 & Data Protection Act (Cap. 586)