Health Record Rights Index · country brief · this country's data as of October 1, 2026

Who holds the health record in Malta?

In 2026, Malta scores 59 out of 100 for how much say a person has over their own health record. It is tied for 27th of 198 countries and territories, and could rank anywhere from 11th to 42nd allowing for scoring error, in the Mixed band (45 to 64). Who holds the keys: you and the health system. Source: Health Record Rights Index, SuperTruth, this country's data as of October 1, 2026.

The person has real controls inside a government or provider system. Its strongest right, compared with the typical country, is getting your full record (72 out of 100, against 40 to 45 for the typical country). No right falls below the typical country; the closest to it is your say over research use (48 out of 100, against 46 for the typical country).

Malta's myHealth portal shows most public-sector records online, but private clinics, hospitals and prescribers are still largely outside the national record.

Published · updated · this country's data as of October 1, 2026 · research tool, not legal advice

overall score · Mixed band, 45 to 64
59/100
rank among 198 countries and territories; likely 11th to 42nd, allowing for scoring error
Tied for 27th
confidence in our evidence
Medium
strength of our evidence (DTI™)
86/100 (Gold)

Questions people ask

Can I see my health record in Malta?

In 2026, getting your full record scores 72 out of 100 in Malta; the typical country scores 40 to 45. Malta scored 93.71 on the EU's 2024 record-access indicator against an EU average of 82.7. myHealth shows public hospital summaries, labs, imaging reports, prescriptions and vaccines, but the Commission found no private-sector data and no mobile app. Source: data.consilium.europa.eu, June 16, 2025, and the other sources below.

Who controls health records in Malta?

In 2026, you and the health system hold the keys to your health record in Malta. Control over who sees it scores 50 out of 100 in Malta; the typical country scores 30. Patients choose which doctors can see their myHealth data and can remove a link at any time, and they set cross-border consent country by country. No patient-visible access log was found; the 2030 strategy only promises a way to see who contributes to records. Source: Information Management Unit, August 19, 2019, and the other sources below.

How does Malta compare?

In 2026, Malta scores 59 out of 100, against 39 for the typical country. This brief compares it with Bulgaria (59 out of 100), United Kingdom (59 out of 100) and Luxembourg (59 out of 100). Source: the ranking of all 198 countries and territories.

Eight rights, compared with Bulgaria, United Kingdom, Luxembourg, the typical EU country and the typical country

Scores out of 100, by right
Getting your full record20%7262 · 66 · 64
Control over who sees it20%5062 · 52 · 70
Privacy and security15%6255 · 56 · 54
One record across your care15%6070 · 62 · 54
Protection from sale and ads10%5850 · 60 · 54
Doctors see it when treating you10%5662 · 60 · 56
Your say over research use5%4844 · 64 · 46
Rules for AI in your care5%5050 · 55 · 50

Black dot: Malta. Hollow dots: Bulgaria, United Kingdom, Luxembourg (scores out of 100 on the right, same order). Gray line: the typical country of all 198. Dashed teal line: the typical EU country. Overall: Malta 59 out of 100, the typical EU country 61. Scores move in steps of about 5 points, so read a rank with its likely range.

What would Malta need to change to score higher?

Malta sits in Mixed (45 to 64); Strong starts at 65. Every right is at or above the typical country. The two with the most room to grow, weighted by how much each counts, are control over who sees it (50 out of 100, against 30 for the typical country) and one record across your care (60 out of 100, against 38 for the typical country). Our scoring rules give more points for:

  • Control over who sees it: A way to say no to sharing (or to be asked first), a log you can read of who opened your record, and finer choices about who sees what. Together these put this right at 60 to 80 out of 100.
  • One record across your care: Family doctors, hospitals, labs, pharmacies, insurers and public health all linked to one record that is used across the country.

Which laws give health record rights in Malta?

  • Data Protection Act (Cap. 586) (2018): Malta's GDPR implementing law; the IDPC supervises and decides complaints.
  • Processing of Personal Data (Secondary Processing) (Health Sector) Regulations (S.L. 528.10) (2019): Lists permitted secondary uses; research needs ethics approval and IDPC authorisation; other uses need consent.
  • Artificial Intelligence Regulations, 2025 (L.N. 226 of 2025): Names MDIA as AI Act market surveillance authority; fines up to EUR 350,000 or 1% of turnover.

Doctors, waits and private care context, not part of the score

Doctors per 10,000
47.2 2023
Nurses and midwives per 10,000
82.6 2023
Private insurance + out-of-pocket
34.0% 2023
Record reaches private care?
no
"Private hospitals, private GPs and most private prescriptions are outside it."

Real cases

  • April 30, 2025 · Information and Data Protection Commissioner (Malta) · archived copy Health provider employee opened a patient's record for personal reasons, regulator finds
  • April 2, 2025 · Information and Data Protection Commissioner (Malta) · archived copy Clinic kept a wrong address after repeated requests and posted health reports there

Compare Malta

Cite this brief

In 2026, Malta scored 59 out of 100 for how much say a person has over their own health record, tied for 27th of 198 countries and territories (could be 11th to 42nd), in the Mixed band. Who holds the keys: you and the health system. Source: Health Record Rights Index, SuperTruth, this country's data as of October 1, 2026, https://healthrecordrights.com/brief/malta/

The 12 sources for Malta

Each source appears once, under the first right it supports. Titles are shown as our research agents recorded them, usually in the page's own language; text in square brackets is our machine translation. Links were checked on the date shown.

Getting your full record (3 sources)

  1. “Digital Decade 2025 country report, Malta (European Commission, Council doc 10407/25 ADD 51)”

    data.consilium.europa.eu (international body) · Title in English

    Dated June 16, 2025 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record; One record across your care

    https://data.consilium.europa.eu/doc/document/ST-10407-2025-ADD-51/en/pdf

  2. “myHealth”

    Ministry for Health (government guidance) · Title in English

    No date recorded · Link checked October 3, 2026 (opened)

    Used for: Getting your full record; Doctors see it when treating you

    https://web.archive.org/web/20260801073650/https://health.gov.mt/public-facing-services/myhealth/

  3. “Digital Health and Health Data Strategy 2030”

    Ministry for Health and Active Ageing (government guidance) · Title in English

    Dated November 2025 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record; Control over who sees it; One record across your care; Doctors see it when treating you; Your say over research use; Rules for AI in your care

    https://web.archive.org/web/20260727061320/https://health.gov.mt/wp-content/uploads/2025/11/Digital-Health-Health-Data-Strategy-Document.pdf

Control over who sees it (2 sources)

  1. “myHealth User Guide for Patients v2.2”

    Information Management Unit (government guidance) · Title in English

    Dated August 19, 2019 · Link checked October 3, 2026 (opened)

    Used for: Control over who sees it; Doctors see it when treating you

    https://web.archive.org/web/20250712071632/https://health.gov.mt/wp-content/uploads/2024/10/myHealth-User-Guide-for-Patients-v.2.2-19Aug19.pdf

  2. “myHealth: About, disclaimer and privacy policy (archived 1 Aug 2026)”

    myhealth.gov.mt (government guidance) · Title in English

    No date recorded · Link checked October 3, 2026 (opened)

    Used for: Control over who sees it; Protection from sale and ads

    https://web.archive.org/web/20260801073639/https://myhealth.gov.mt/home/about

Privacy and security (3 sources)

  1. “The Commissioner imposed an administrative fine of EUR 20,000 on a private clinic”

    IDPC (regulator) · Title in English

    Dated April 7, 2025 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://idpc.org.mt/news-latest/the-commissioner-imposed-an-administrative-fine-of-e20000-on-a-private-clinic/

  2. “Decisions”

    Information and Data Protection Commissioner (regulator) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Privacy and security; Protection from sale and ads

    https://idpc.org.mt/decisions/

  3. “Data Protection Act, Cap. 586”

    Legislation Malta (law or regulation) · Title in English

    Dated September 19, 2023 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://legislation.mt/eli/cap/586/eng

Protection from sale and ads (1 source)

  1. “S.L. 528.10 Processing of Personal Data (Secondary Processing) (Health Sector) Regulations”

    legislation.mt (law or regulation) · Title in English

    Dated October 8, 2019 · Link checked October 2, 2026 (opened)

    Used for: Protection from sale and ads; Your say over research use

    https://legislation.mt/eli/sl/528.10/eng

Your say over research use (1 source)

  1. “European Health Data Space Regulation (EHDS)”

    European Commission (international body) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://health.ec.europa.eu/ehealth-digital-health-and-care/european-health-data-space-regulation-ehds_en

Rules for AI in your care (2 sources)

  1. “L.N. 226 of 2025, Artificial Intelligence Regulations, 2025”

    Legislation Malta (law or regulation) · Title in English

    Dated October 10, 2025 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://legislation.mt/eli/ln/2025/226/eng

  2. “Digital Omnibus on AI has been published”

    Cuatrecasas (other) · Title in English

    Dated July 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.cuatrecasas.com/en/global/intellectual-property/art/digital-omnibus-ai-has-been-published

Something wrong on this page? Tell us.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

SuperTruth Inc. · 24 S. 24th St., Philadelphia, PA 19103, USA · +1 215 918 4140 · supertruth.ai
Something wrong? Tell us · Questions or a briefing: supertruth.ai/on-the-record#contact · Full index: healthrecordrights.com
OECD: Organisation for Economic Co-operation and Development (38 mostly high-income countries). DTI™: the Data Trust Index, which grades the evidence behind each score. SuperTruth makes it and publishes this index. Everything here comes from public information: laws, government and regulator pages, court decisions, published news, WHO, OECD and World Bank data. Full sources: https://healthrecordrights.com/brief/malta/#sources. SuperTruth built this index and sells health data verification products; no one paid to be included. Research tool, not legal advice. Our scores and our own words are CC BY 4.0; quoted law and source titles stay with their owners.