evidoria

← Back to browse

Good practice Imported

Malta's AI ITA Certification Scheme — A Voluntary National AI Assurance Framework With Years of Near-Zero Uptake

Malta · Birkirkara · See the Malta profile

Evidence: Descriptive / self-reported Top 97% 20/100 · Ask Evidence Copilot about this practice

In 2019 Malta's MDIA launched what it called the world's first national AI certification scheme. An academic review found zero applications by 2021, and even after a 2024 legal overhaul made it 'fully operational,' MDIA still publishes no uptake or certification statistics.

0
Applications submitted under the scheme (2019–2021)
5+ years (2019–2026)
Years since launch with no published uptake data (2019–2026)

Details

Maturity
Established
Promoter
Malta Digital Innovation Authority (MDIA)
Period
2019–2026
Keywords
AI certification, regulatory assurance, digital governance

Context

In October 2019 the Malta Digital Innovation Authority (MDIA) launched the AI Innovative Technology Arrangement (AI ITA) scheme, describing it as the world's first national AI certification programme. Under the scheme, developers and deployers could have AI systems certified by an MDIA-licensed 'systems auditor' as meeting pre-set ethical, transparency and technical criteria — a voluntary conformity-assessment model that anticipated elements later formalised in the EU AI Act.

Objectives

To provide a voluntary national AI certification and assurance pathway ahead of binding EU-level regulation.

Activities

MDIA subsequently issued Technology Assurance Sandbox programme guidelines (2021) and blueprint guidelines (2022), and opened a public consultation on an ITAS Sandbox in 2024. Subsidiary Legislation 591.01 (the ITAS Certification Regulations) entered into force on 14 June 2024, making the certification framework 'fully operational' under Malta's regulatory tracker. MDIA is now developing a further Technology Assurance Assessment Framework, with consultations planned through 2025.

Results

An independent academic assessment of AI certification schemes found that, as of 2021, no application had yet been submitted under the scheme — two years after launch, the flagship programme had attracted no real-world adopters. As of the most recent public documentation, no statistics on the number of certifications issued, sandbox participants, or applications under the revised regime have been published.

Conclusions

This is included as a cautionary case: a well-publicised, carefully designed voluntary AI-assurance regime that, five years on, still shows no confirmed public evidence of real-world adoption. It illustrates a general risk for other jurisdictions building similar voluntary certification schemes — legal architecture alone, without a market mandate, incentive, or transparency requirement on uptake, may not translate into actual use.

Implementation

Indicative cost
Low (< €50k) — No public budget figures disclosed for running the scheme.
Time to results
Long (> 3 years) — Launched October 2019; sandbox guidelines 2021; blueprint guidelines 2022; ITAS Certification Regulations (SL 591.01) in force 14 June 2024; further framework consultations planned through 2025.
Staffing & skills
MDIA-licensed 'systems auditors' (certification assessors)

Conditions for success

  • a market mandate, incentive, or transparency requirement on uptake — flagged by the case itself as what was missing

Common failure modes

  • an independent 2021 academic review found zero applications submitted, two years after launch
  • no statistics on certifications issued, sandbox participants or applications have ever been published, even after the 2024 legal relaunch
  • a voluntary scheme with legal architecture but no market mandate or incentive failed to attract real-world adopters

Where it fits

Governance type
national digital/innovation regulatory authority
Scale
national, voluntary opt-in scheme
Income level
high-income (Malta, EU)

Commonly funded by

Digital Europe Programme National / regional programmes

Indicative funding routes for practices of this type — always check each programme's current calls and eligibility rules.

Do you run this practice? Claim it — verified implementers get a public contact pathway and can propose corrections.

Data sources

Where this practice's information was retrieved from, and when.

Similar practices you may find useful