Malta

AI and professional secrecy in Malta: the Professional Secrecy Act, the GDPR and client documents

By · Updated

In short: In Malta, disclosing a professional secret is not only a disciplinary matter: the Professional Secrecy Act (Cap. 377) and article 257 of the Criminal Code make unauthorised disclosure a criminal offence. Add the GDPR and the Data Protection Act (Cap. 586), and client documents should not reach an AI provider with identities in them. Remove names, ID card numbers, VAT numbers and addresses on your own computer first, and keep the key yourself.

Request early accessTry it in your browser

Professional secrecy

Malta's Professional Secrecy Act (Chapter 377 of the Laws of Malta) defines professional secrets broadly, including information communicated in writing, documents and electronic data. Article 257 of the Criminal Code punishes the unauthorised disclosure of such secrets. Advocates are expressly covered by the Act, which also lists other regulated professions.

Data protection and AI

The GDPR applies directly, implemented by the Data Protection Act (Cap. 586) and supervised by the Information and Data Protection Commissioner (IDPC). Since Legal Notice 227 of 2025, the IDPC is also designated under the EU AI Act for certain high-risk AI systems (IDPC). Pseudonymised data remains personal data under article 4(5) of the GDPR; pseudonymisation reduces what a third party receives, which is the point when that third party is an AI provider.

A practical routine for Maltese firms

  1. Treat any AI provider as a third party for professional secrecy purposes.
  2. Remove identifiers before upload: names, ID card numbers, MT VAT numbers, company registration numbers, addresses ("Triq ..."), IBANs.
  3. Keep the key on your computer and never paste it into a chat.
  4. Review the output and restore real names locally.

What Velado detects in Maltese documents

Maltese ID card numbers (with context), MT VAT numbers, company registration numbers, Maltese street addresses ("Triq ir-Repubblika, 12"), IBANs, phone numbers, names after "Client:", "Director:" and similar, plus UK, Irish and Italian identifiers often found in Maltese files.

On your computer

Client: Joseph Camilleri, ID card 123456M, VAT MT12345678, Triq ir-Repubblika, 12

What the AI sees

Client: [PESSOA_1], ID card [DOC_ID_1], VAT [DOC_ID_2], [MORADA_1]

Price in EUR

  • Individual, 1 user: €129 per year
  • Firm, up to 5 users: €449 per year
  • Firm+, up to 15 users: €990 per year

Prices exclude VAT and sales tax. Free public beta until 31 January 2027, then a 14-day free trial. All plans.

This page summarises public guidance for information only. It is not legal advice; check your professional body's current rules.

FAQ

Does Velado work in English and Maltese documents?

The app is in English (and four other languages). It detects Maltese ID card and VAT numbers and Maltese street addresses; names in Maltese are detected after cues such as "Client:" or "Director:", and you can add any it misses on the review screen.

Where are my documents processed?

On your computer. The desktop app has no internet access, and the browser version processes files inside the browser.

What does it cost in Malta?

€129 per year for one user, €449 for a team of up to 5 and €990 for up to 15, excluding VAT. The first 100 customers keep the founder price for life.

Other countries

Request early access

The first 100 customers lock in the founder price for life. We reply within 1 business day.

We only use your details to reply and, if you agree, send news. Privacy.