Is it legal to record a meeting in Malta?

This was checked rather than assumed. The consolidated Criminal Code, Chapter 9, was downloaded in full and searched. It contains no offence of eavesdropping, of using a listening device, or of recording a private conversation, and the terms for those do not appear anywhere in it.

The only interception provision in the whole Code sits in the computer-misuse sub-title, Art. 337C(1)(k): a person who without authorisation "intercepts by technical means, non-public transmissions of data, to, from or within an information system or a computer system". That is aimed at intercepting data in transit, and it requires the act to be without authorisation. A participant in a call whose own device legitimately receives the audio, and which then records what it receives, is not intercepting a transmission without authorisation.

Our confidence that no general offence exists is high, because the whole Code was searched rather than sampled. Our confidence that Art. 337C(1)(k) does not reach a system-audio capture of a VoIP call is moderate: that is a reading of the provision rather than a decided point, and it is the one place a Maltese prosecutor could look.

The interception rule that does exist confirms the participant's position rather than restricting it. The ePrivacy transposition, S.L. 586.01 reg. 4(1): "no person other than the user, shall listen, tap, store or undertake any other form of interception or surveillance of communications … without the consent of the user concerned". A meeting participant is a user, so reg. 4(1) does not reach them. Reg. 4(2) further preserves any legally authorised recording in the course of lawful business practice for the purpose of providing evidence of a commercial transaction or other business communication. That is the standard ePrivacy structure, and it is why a participant is outside interception law across the EU, Malta included.

Yes, so far as criminal law is concerned. There is no provision to be inside.

That is not the same as there being no constraint. It means the entire answer is a data protection one, with no bright line to point at, which in practice is harder to reason about than a clear prohibition would be.

Nothing by criminal law. The GDPR transparency obligation applies as everywhere, so notice at or before the start is the right practice, but Malta supplies no statutory form of words and no criminal-law consent defence to satisfy. No authority was found on any Maltese-specific notice expectation.

Quick note before we start: I'm recording this so I can write my notes up afterwards. It transcribes on my laptop, nothing goes to the cloud, and I only keep the text. Say so now if you'd rather I didn't.

GDPR applies as well, and the analysis is the ordinary European one: a meeting recording is personal data about every identifiable speaker, a transcript without speaker labels is still personal data, the household exemption is read narrowly and a work meeting has a direct connection to a professional activity, you need a lawful basis, and Art. 13 wants the information at the time the data are obtained, which for an always-on recorder means before the substance of the meeting. The European framework covers all of that once rather than on every country page.

No statutory works council and therefore no co-determination trigger. Malta has no equivalent of the German Betriebsrat or the Croatian radničko vijeće; employee involvement runs through recognised unions and, where they apply, the transnational employee-involvement regulations. We state that only as an absence, having not verified it.

No provision restricting audio monitoring specifically was found. The governing instrument is the Data Protection Act, Chapter 586, whose text we did not read.

So a Maltese employer rollout is a plain GDPR exercise: lawful basis, proportionality, transparency, and a DPIA if the thresholds are met. That is a genuinely lower bar than Portugal's or Croatia's.

The Information and Data Protection Commissioner. Nothing found on meeting recording, local transcription or employee monitoring, and no guidance document was opened in our research. That is a gap.

Because the binding layer in Malta is data protection rather than criminal law, this is where the product's architecture does real work. Transcription runs on your own device, the audio is never written to disk, and nothing is sent anywhere. There is no cloud component, so on our reading we are not a processor under Art. 4(8), which processes personal data on behalf of a controller and presupposes receiving it. That means no Art. 28 data processing agreement to sign with us, no sub-processor list, no international transfer and no transfer impact assessment, because there is no transfer. We found no decision squarely holding that an on-device-only vendor is not a processor, so that is reasoning you can check rather than a settled point.

What it does not do is disclose anything. There is no bot in the participant list and no banner on anyone else's screen, so the transparency obligation rests entirely on you saying something. Earkeep does not make anyone compliant and could not: a tool cannot be compliant, only a processing operation can be lawful.

Where it helps in the room is that stopping is real and checkable. A pause from the live edge releases the microphone and the system audio stream, so your operating system's own recording indicator goes dark in front of the person who asked. A meeting on a connected calendar can be marked never-record. And a stretch of the day, or a saved meeting with its transcript, can be purged from the file on your own disk, with no server copy anywhere to reconcile against.

• Criminal Code, Cap. 9 (searched in full)
• Processing of Personal Data (Electronic Communications Sector) Regulations, S.L. 586.01
• Data Protection Act, Cap. 586
• IDPC
• GDPR, EUR-Lex

• European recording laws: the four layers, the controller question, and all 32 countries.
• Telling people you're recording: the scripts, and the three ways to stop.
• Private by design: why the audio never leaves your computer.

This page is legal information, not legal advice. It summarises provisions and guidance rather than replacing them, and we are not lawyers. If the answer matters, ask someone who can be held to their answer.