Retention of Data (Malta Gaming Authority) Regulations, 2019

L.N. 74 of 2019

GAMING ACT

(CAP. 583)

Retention of Data (Malta Gaming Authority) Regulations, 2019

IN EXERCISE of the powers conferred by article 12 of the

Gaming Act, the Parliamentary Secretary for Financial Services,

Digital Economy and Innovation, in consultation with the Malta

Gaming Authority, has made the following regulations:-

The title of these regulations is the Retention of Data Citation.

(Malta Gaming Authority) Regulations, 2019.

(1) In these regulations, save as provided in sub- Interpretation.

regulations (2) and (3), all words and phrases shall have the same

meaning as prescribed in the Gaming Definitions Regulations.

(2) In these regulations, unless the context otherwise requires,

"the Act" means the Gaming Act.

(3) All other terms used in these regulations shall have the

same meaning attributed to them in the Act.

(1) The Authority may retain all data, including any Data Retention

personal data, collected or otherwise processed in the pursuit of its Period.

regulatory functions under the Act for a period of ten years from the

date when the data is no longer necessary in relation to the purposes

for which it is collected or otherwise processed

Provided that the retention of data, including any personal

data, is ipso jure considered to be necessary in relation to the purposes

for which it is collected or otherwise processed, throughout the

duration of the validity of any authorisation issued by the Authority.

(2) Retention of the data, including any personal data, by the

Authority for further periods shall be lawful when it is necessary

(a) for compliance with a legal and, or regulatory

obligation imposed on the Authority;

(b) for archiving purposes in the public interest, scientific

and, or historical research purposes and, or statistical purposes;

and, or

(c)

for the establishment, exercise, and, or defence of

B

legal claims by the Authority.

(3) The Authority shall process the data in a lawful, fair and

transparent manner, particularly where the data constitutes personal

data. The Authority shall process all personal data in accordance with

data protection and privacy legislation.

€0.18