NIS2 Healthcare — Malta
The sector “Healthcare” is named in the NIS2 law of Malta (Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order). Below is the relevant provision of the national law, verbatim, with the official source reference.
What the law says
Health (i) Healthcare providers as defined in Article 3, point (g), of
Directive 2011/24/EU of the European Parliament and of the
Council;
(ii) EU reference laboratories as referred to in Article 15 of
Regulation (EU) 2022/2371 of the European Parliament and of the
Council;
CIP Department as the
national supervisoryReference: S.L. 460.41, First Schedule
The provision is part of S.L. 460.41, First Schedule, which corresponds to Annex I of the NIS2 Directive (EU) 2022/2555 (sectors of high criticality).
Is your company in scope?
The scope of the obligations depends on entity type and size — within the same sector a company can be an essential entity, an important entity, or out of scope. The free applicability check gives the exact answer.
Frequently asked questions
Does NIS2 apply to the “Healthcare” sector in Malta?
Yes. The law of Malta (S.L. 460.41, S.L. 460.41, First Schedule) names this sector directly — the provision text is on this page, verbatim.
Is every company in this sector covered by NIS2?
No — the obligation depends on entity type and size. The sector being listed (S.L. 460.41, First Schedule) is the first condition; the classification (essential or important entity) comes from the free applicability check.
Which law regulates this sector?
Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order — S.L. 460.41, S.L. 460.41, First Schedule. The official source link is on this page.