Malta's EAA Fine Doesn't Exist Yet — and We Followed the Trail to Where It Stops
Hungary's penalty looks missing but ends in a nine-figure forint ceiling three documents later. Malta's looks the same and dead-ends: the regulations point to an act, the act points to a ministerial regulation, and that regulation has not been made. More than a year after the law took effect, Malta's own government page on the EAA says nothing about penalties at all.
Quick answer
Malta transposed the EAA through the Accessibility Measures (European Accessibility Act) Regulations — subsidiary legislation 627.03, made by Legal Notice 214 of 2022 under the UN Convention on the Rights of Persons with Disabilities Act (Cap. 627). In force 28 June 2025, with the 112 emergency number from 28 June 2027. Regulation 27 (Penalties) states no amount. It defers to Article 32C of the Equal Opportunities (Persons with Disability) Act (Cap. 413), which itself only empowers the Minister to make regulations fixing administrative fines. That further regulation has not been located and appears not to have been made. The regulator is the CRPD — a disability-rights commission, not a market authority.
Three hops to nowhere
The chain is short and each link is checkable:
| Step | Instrument | What it says about the fine |
|---|---|---|
| 1 | S.L. 627.03, Reg. 27 — the penalty regulation | No figure; points to Cap. 413 |
| 2 | Cap. 413, Art. 32C | Empowers the Minister to prescribe administrative fines by regulation. Still no figure |
| 3 | The ministerial regulation | Not found, and not referenced in any published index |
Compare Hungary, the other country everyone files under "the fine isn't in the accessibility law." Hungary's chain runs accessibility act → government decree → market surveillance act, and terminates in HUF 650 million. Malta's runs regulations → act → nothing.
We re-checked this in August 2026, more than a year after the obligations began, and the position is unchanged. The Maltese government's own European Accessibility Act page names CRPD as the market surveillance authority and describes the Act's objectives and forthcoming user guidelines — and contains no mention of penalties, sanctions or fines at all. CRPD's published legislation page lists no fine-setting instrument either. Where a government explaining its own accessibility law to businesses doesn't state a consequence, the most likely reason is that there isn't one to state yet.
The figures in circulation have no source
Compliance-vendor pages quote Maltese fines at €1,000–€50,000, €1,000–€20,000, or €5,000–€15,000. None cites a statute, because there is no statute to cite.
We can't prove where those ranges came from, but there is a pattern worth noting. They cluster around Cyprus's real figures — the €10,000 administrative fine and €20,000/€30,000 criminal tiers in Law 57(I)/2024. Two small island member states, both with a rights-focused body in the enforcement chain: it looks very much like Cypriot numbers migrating onto a Maltese row in a comparison table, and then being copied onward. That would be the same failure mode as the Dutch €900,000 and the French €50,000 — with the twist that the borrowed figure came from a different country rather than a different law.
The €5,000 that is real, and isn't a fine
One genuine euro figure exists in the Maltese framework, and it is easy to mistake for a ceiling.
Claims for a pecuniary remedy under the Convention exceeding €5,000 go to the First Hall of the Civil Court. Claims at or below it go to the Panel for Remedy under the Convention — a three-member panel that includes people with disability or lived experience of disability.
That is a jurisdictional routing rule, not a penalty. It tells you which forum hears a claim, not what non-compliance costs. If you see €5,000 attached to Malta in a fines table, this is almost certainly where it came from, and it has been misread.
The enforcement machinery exists — only the number is missing
This is the nuance that keeps Malta from being an empty regime. Cap. 413 Article 32A sets out a working enforcement structure that operates regardless of whether a fine schedule has been prescribed:
Investigations Section → Enforcement Section → the Board, which can impose fines and order corrective action → appeal to the Administrative Review Tribunal, with a 20-day window.
So CRPD can investigate, escalate, and obtain a binding order requiring you to fix an inaccessible service. What it cannot currently do is attach a prescribed monetary amount to that order. For a business, the practical exposure in Malta is therefore a corrective order and a tribunal process — a similar shape to Greece's products regime, where restriction and orders do the work that fines do elsewhere.
A rights commission, not a market regulator
CRPD — the Commission for the Rights of Persons with Disability — is the sole market surveillance authority for products, services and the built environment, under Cap. 413 Art. 22(1)(v). It is supported by memoranda of understanding rather than shared jurisdiction:
| Body | Role |
|---|---|
| CRPD | Sole market surveillance authority |
| MCCAA (competition and consumer authority) | Assists on technical matters such as CE marking and product withdrawal |
| MCA (communications authority) | Sectoral input on telecoms — not an independent EAA regulator |
Malta therefore joins Cyprus, which routes enforcement to the Deputy Minister of Social Welfare, in treating accessibility as a disability-rights matter administered by a rights body rather than a product-compliance matter administered by an inspectorate. It is a coherent choice, and it shapes what enforcement is likely to look like: investigation, conciliation and corrective orders rather than market-surveillance fines.
Private enforcement is available
Regulation 26 gives standing to bring redress proceedings not only to the affected consumer but to public bodies, private associations, and organisations with a legitimate interest acting on their behalf, under Cap. 627 Art. 3.
In a jurisdiction where the administrative fine has no prescribed amount, that route matters more than usual. It is the same pattern seen in Greece's Art. 25A collective action and Hungary's public-interest actions — and where the regulator's monetary lever is missing, the litigation lever is what remains.
Dates
The general obligations applied from 28 June 2025; the 112 emergency number requirements only from 28 June 2027 (Reg. 4(8)), an option the Directive allows and several member states have taken.
Transitional periods follow the EU-wide pattern: pre-2025 service contracts run up to five years past 28 June 2025; non-compliant products may be used in service delivery until 28 June 2030; self-service terminals are grandfathered to the end of their economic life or 20 years from entry into use.
Has it been enforced yet?
No. And in Malta's case the answer is close to structural: with no prescribed fine, the enforcement output would be a corrective order from the Board rather than a penalty, and those are not published as a matter of course.
What this means for your business
- Don't record a Maltese fine figure, because there isn't one. If your risk register contains €1,000–€50,000 for Malta, it is carrying a number with no basis in Maltese law.
- Plan for a corrective order instead. CRPD can investigate a complaint, escalate it through the Enforcement Section, and have the Board order you to make the service accessible, with only a 20-day window to appeal to the Administrative Review Tribunal. That order is binding whether or not a fine schedule ever appears.
- Treat this as a watch item, not a settled position. Article 32C exists precisely so the Minister can prescribe fines by regulation; that can happen at any time, without primary legislation and without much notice. Malta's penalty regime could go from nothing to a full schedule in a single legal notice.
Frequently asked questions
What is the EAA fine in Malta?
There is no prescribed amount. Regulation 27 defers to Cap. 413 Art. 32C, which only empowers the Minister to set fines by regulation — and that regulation does not appear to have been made.
But I've seen €1,000–€50,000 quoted.
It has no statutory basis. The ranges in circulation closely track Cyprus's real figures and appear to have migrated across countries in comparison tables.
Isn't €5,000 the Maltese fine?
No. €5,000 is the threshold that decides whether a claim goes to the Panel for Remedy or the First Hall of the Civil Court. It is a jurisdictional rule, not a penalty.
So nothing can happen to me?
Not so. CRPD can investigate and the Board can order corrective action under Cap. 413 Art. 32A, appealable to the Administrative Review Tribunal within 20 days.
Who enforces it?
CRPD, the Commission for the Rights of Persons with Disability, supported by MCCAA on technical matters and MCA on telecoms under memoranda of understanding.
Related
- ← Back to EAA Fines by Country — the full 27-state comparison
- Official text: S.L. 627.03 (LN 214 of 2022) (Legislation Malta)
- Hungary's EAA fine — the deferral chain that does end in a number
- Cyprus's EAA penalties — the real figures Malta's circulating ones appear to be borrowed from
- Greece's EAA penalties — another regime where orders, not fines, do the work
Sourcing note: we traced the three-step deferral across the EAA regulations, their official explanatory notes and Cap. 413, and re-checked the current position in August 2026 against the Maltese government's own EAA page and CRPD's published legislation list — neither states a penalty or references a fine-setting legal notice. We have not been able to re-read the text of Cap. 413 Art. 32C directly online.
