The Office of the Information and Data Protection Commissioner (IDPC) of Malta has published its annual report and financial statements for the year 2025, reviewing its regulatory and supervisory activities.

The report highlights several key figures for 2025, including the receipt of 701 complaints, of which 182 were deemed admissible and 75% of these resulted in a finding of an infringement. The authority handled 535 cases through the one-stop-shop (OSS) cooperation mechanism, acting as lead supervisory authority in 517 of them. Additionally, 114 personal data breaches were notified, with the financial sector being the most affected and cyberattacks the main cause. The document also emphasizes the growing role of the IDPC following the entry into force of the EU Artificial Intelligence Act, the authority having been designated as Malta's Fundamental Rights Authority for aspects related to the protection of personal data. Finally, the report details the authority's participation in coordinated supervisory activities of the European Data Protection Board (EDPB) and various international initiatives.