S.L. 480.2 Art. 93Computerised data-filing system.

(1) There shall be established by the Commissioner, a computerised data-filing system which shall be accessible to the

Commissioner.

(2) That data-filing system shall record all information relating to firearms which is needed in order to trace and identify those firearms, including:

(a) the type, make, model, calibre and serial number of each firearm and the mark applied to its frame or receiver as a unique marking in accordance with regulation 7A(1) of the Firearms and Ammunition (Movement in Member States and Other Matters) Regulations, which shall serve as the unique identifier of each firearm;

(b) the serial number or unique marking applied to the essential components, where that differs from the marking on the frame or receiver of each firearm;

(c) the names and addresses of the suppliers and of the persons acquiring or possessing the firearm, together with the relevant date or dates; and

(d) any conversions or modifications to a firearm leading to a change in its category or subcategory, including its certified deactivation or destruction and the relevant date or dates.

(3) The Commissioner shall ensure that the personal data are deleted from the computerised data-filing systems upon the expiry of the periods specified in this regulation. This is without prejudice to cases in which specific personal data has been transferred to a national authority competent for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal punishments and are used in that specific context, or to other national authorities competent for a compatible purpose. In those cases, the processing of such data shall be regulated by the Data Protection Act and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

The records of firearms and essential components referred to in sub-regulation (1) and the related personal data shall be capable of being accessed:

(a) by the Commissioner for a period of 10 years after the destruction of the firearm or the essential components in question; and

(b) by the national authorities competent for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, for a period of 30 years after the destruction of the firearm or the essential components in question. The Commissioner shall ensure that the personal data are deleted from the computerised data-filing systems upon expiry of the periods specified in the second and third sub-regulations. This is without prejudice to cases in which specific personal data have been transferred to a national authority competent for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties and are used in that specific context, or to other national authorities competent for a compatible purpose. In those cases, the processing of such data shall be regulated by the Data Protection Act and the relevant

European Union Law.

(4) The Commissioner shall ensure that dealers established in Malta report transactions involving firearms or essential components without undue delay, that dealers have an electronic connection to the Police for such reporting purposes and that the data-filing systems are updated as soon as possible upon receipt of information concerning transactions involving firearms or essential components:

Provided that dealers shall also report to the Commissioner any suspicious transactions that were not concluded due to their nature and scale.