These updates follow the amendments made to the Company Service Providers Act (Chapter 529 of the Laws of Malta) (the “Act”) passed by Parliament by Act L of 2020, on 13 November 2020.
The amendments to the Act, as amended by Act L of 2020 CSP Act, have been brought into force on 16 March 2021 by the Minister for Finance and Employment through L.N. 96 of 2021.
As part of the authorisation process, the applicant must seek authorisation from the Authority to be able to operate under one of the three following classes, depending on the services offered, as provided by the new Schedule to the Act:
The classification of the respective class will be determined by the Authority.
The maximum administrative penalty for contravening or failing to comply with the provisions of the Act or rules or regulations issued in terms of the Act, as well as failure to cooperate with the MFSA has been raised to €50,000.
In the light of these amendments, the MFSA has revised the rules for CSPs (the “Rulebook”) in line with the amended Act. The said Rulebook, the final version of which has been issued on the 15 March 2021:
outlines the criteria for those classes considered as 'under threshold' where a proportionate regulatory approach will apply;
provides supplementary rules for the different CSP classes;
explains the authorisation requirements for CSPs, the application process, the appointment of key function holders/officers and other approved persons and outlines an enhanced competence assessment which will be supplementary to the fitness and properness standards applied by the MFSA;
strengthens the ongoing obligations for CSPs, in particular relating to the governance systems and the requirements in respect to the dual control, policies and procedures while adding new rules on business continuity, capital and financial resources, risk management, compliance, ongoing monitoring of policies and procedures and cybersecurity.
persons in possession of a registration to act as a CSP in terms of the Companies Service Providers Act, 2013 prior to the date of coming into force of the amendments introduced by Act L of 2020, are required to comply with these Rules within 6 months from the date of the publication of the Rulebook. During this six-month period, such CSPs must continue complying with the previous version of the Rules and strive to comply with these Rules on a best effort basis.