NIS2 Energy — Malta
The sector “Energy” is named in the NIS2 law of Malta (Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order). Below is the relevant provision of the national law, verbatim, with the official source reference.
What the law says
Energy (a) Electricity (i) Electricity undertakings as defined in Article 2, point (57), of
Directive (EU) 2019/944 of the European Parliament and of the
Council, which carry out the function of "supply" as defined in
Article 2, point (12), of said Directive;
(ii) Distribution system operators as defined in Article 2,Reference: S.L. 460.41, First Schedule
The provision is part of S.L. 460.41, First Schedule, which corresponds to Annex I of the NIS2 Directive (EU) 2022/2555 (sectors of high criticality).
Is your company in scope?
The scope of the obligations depends on entity type and size — within the same sector a company can be an essential entity, an important entity, or out of scope. The free applicability check gives the exact answer.
Frequently asked questions
Does NIS2 apply to the “Energy” sector in Malta?
Yes. The law of Malta (S.L. 460.41, S.L. 460.41, First Schedule) names this sector directly — the provision text is on this page, verbatim.
Is every company in this sector covered by NIS2?
No — the obligation depends on entity type and size. The sector being listed (S.L. 460.41, First Schedule) is the first condition; the classification (essential or important entity) comes from the free applicability check.
Which law regulates this sector?
Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order — S.L. 460.41, S.L. 460.41, First Schedule. The official source link is on this page.