S.L. 460.41 Art. 32General conditions for imposing administrative penalties on essential and important entities. 

(1) The administrative penalties shall be imposed in addition to any of the enforcement measures in article 29(6)(a) to (k), article 30(6)(a) to (k) and article 31(10).

(2) Where the CIP Department, or where designated the competent authority, requests the imposition of an administrative penalty and at the same time, determines the amount of the administrative penalty in each individual case, due regard shall be given, to the elements provided for in article 31(8).

(3) When they infringe articles 19 or 20, essential entities are subject, in accordance with sub-articles (1) and (2), to administrative penalties of a maximum of ten million euro (€10 000 000), or of a maximum of two percent (2%) of the total worldwide annual turnover in the preceding financial year of the undertaking to which the essential entity belongs, whichever is higher.

(4) When they infringe articles 19 or 20, important entities are subject, in accordance with sub-articles (1) and (2), to administrative penalties of a maximum of seven million euro (€7 000 000), or of a maximum of one point four percent (1.4%) of the total CYBERSECURITY ACROSS THE EUROPEAN UNION 460.41 (MALTA)

worldwide annual turnover in the preceding financial year of the undertaking to which the essential entity belongs, whichever is higher.

(5) Without prejudice to the powers of the CIP Department, or where designated the competent authority, administrative penalties may be imposed against public administration entities.

(6) Deleted by Legal Notice 89 of 2026.