Company Service Providers (“CSPs”) - legal updates

30 April 2021

These updates follow the amendments made to the Company Service Providers Act (Chapter 529 of the Laws of Malta) (the “Act”) passed by Parliament by Act L of 2020, on 13 November 2020. 

The amendments to the Act, as amended by Act L of 2020 CSP Act, have been brought into force on 16 March 2021 by the Minister for Finance and Employment through L.N. 96 of 2021.

Now that the amendments to the Act are in force...

  • There has been a move from the concept of registration to authorisation for CSPs as defined under the Act. Applicants will be able to submit their applications for authorisation from the MFSA in terms of the CSP Act, through the LH Portal from 16 March 2021 until 16 May 2021. For those CSPs who are already registered with the Authority, their registration will be automatically converted to an authorisation.
  • As part of the authorisation process, the applicant must seek authorisation from the Authority to be able to operate under one of the three following classes, depending on the services offered, as provided by the new Schedule to the Act:

    • Class A: CSPs authorised to provide by way of business: i) formation of companies or other legal entities; and/or ii) provision of  registered office, a business correspondence or administrative address and other related services of a company, a partnership or any other legal entity. The classification of the respective class will be determined by the Authority.
    • Class B: CSPs authorised to provide by way of business the services of acting as, or arranging for another person to act as director or secretary of a company, a partner in a partnership or in a similar position in relation to other legal entities. The classification of the respective class will be determined by the Authority.
    • Class C: CSPs which shall be authorised to provide by way of its business all of the services of a CSP as defined under the Act.

The classification of the respective class will be determined by the Authority.

  • Warranted persons (including accountants and lawyers)  offering company services by way of business (further guidance on this matter is included in the Rulebook) will no longer be considered exempt from the provisions of the Act. Following the expiration of 8 months from the first date of the coming into force of the amended Act such persons may only continue to provide company services provided that they have applied for authorisation under the Act within 2 months from the date of coming into force of the Act (i.e. by 16 May 2021), and have duly been authorised by the MFSA. In this respect the amended Act also provides detailed transitory provisions. 
  • Similarly the exemption is removed for de minimis operators.

  • Persons having a licence, registration or any other authorisation to provide company services, issued by the relevant regulatory authority in an approved jurisdiction, is not subject to authorisation under the Act. However such a person is required, within 90 days, to notify the MFSA of the intention of providing company services, and the MFSA in its discretion will determine the applicable class.

  • The MFSA may now cancel an authorisation, where the authorised person is found liable by the Financial Intelligence Analysis Unit (‘FIAU’) for a serious, repeated or systematic breach of the Prevention of the Money Laundering Act and any regulations issued in terms of this Act;

  • Duty on the auditor of the CSP to report to the MFSA any suspicious matter, including matters which are likely to lead to a serious qualification or refusal of the auditor’s report on the accounts, or a material breach of the applicable legal or regulatory requirements.
  • The maximum administrative penalty for contravening or failing to comply with the provisions of the Act or rules or regulations issued in terms of the Act, as well as failure to cooperate with the MFSA has been raised to €50,000.

Financial control

Additional guidelines are provided by the CSP Rulebook

In the light of these amendments, the MFSA has revised the rules for CSPs (the “Rulebook”) in line with the amended Act. The said Rulebook, the final version of which has been issued on the 15 March 2021:

  • ensures that the proportionality principle is applied;
  • outlines the criteria for those classes considered as 'under threshold' where a proportionate regulatory approach will apply;

  • provides supplementary rules for the different CSP classes;

Technology in finance
  • explains the authorisation requirements for CSPs, the application process, the appointment of key function holders/officers and other approved persons and outlines an enhanced competence assessment which will be supplementary to the fitness and properness standards applied by the MFSA;

  • strengthens the ongoing obligations for CSPs, in particular relating to the governance systems and the requirements in respect to the dual control, policies and procedures while adding new rules on  business continuity, capital and financial resources, risk management, compliance, ongoing monitoring of policies and procedures and cybersecurity. 

  • persons in possession of a registration to act as a CSP in terms of the Companies Service Providers Act, 2013 prior to the date of coming into force of the amendments introduced by Act L of 2020, are required to comply with these Rules within 6 months from the date of the publication of the Rulebook. During this six-month period, such CSPs must continue complying with the previous version of the Rules and strive to comply with these Rules on a best effort basis.