S.L. 628.1 Art. 22Register of members. 

An association shall keep an internal up to date register of members under strict security controls. Such register shall include the following information about each registered member:

(a) the full name and surname;

(b) the identity card number or other reference number indicated in an official document issued by a competent Maltese authority evidencing residency in Malta and the expiry date of such document;

(c) the date of birth;

(d) the residential address;

(e) the email address;

(f) the contact number;

(g) the date when such person became a member of the association;

(h) where applicable, the date when a member ceased to be a member of the association and the reason thereof;

(i) a copy of the identity card or residence document from which the details in paragraph (b) were obtained;

(j) details about each gram of cannabis distributed to the members, including the location where the transaction took place, the date and time of the transaction, any unique transaction identification codes as prescribed by the Authority and the amount paid; and

(k) details about membership and admission fees paid and the period for which they pertain.

(2) An association shall, without divulging details which may identify the identity of the members, deliver an extract from the register of members to the Registrar which indicates all changes for the preceding month by not later than the seventh (7th) day of each month.

(3) The association shall retain the personal data of each member shall be kept for a period of two (2) years after the date when the person ceases to be a member of the association. Following the expiration of such period, an association shall anonymise the date in such manner that the person is no longer identifiable, and keep only information in relation to the amount of cannabis distributed and fees ORGANISATIONS)

paid shall be kept for a period of ten (10) years after the date when such person ceased to be a member of the association.