Economy, Business and Trade

The Technology Assessment Recognition Framework (TARF) by the MDIA is a tiered framework designed to provide varying degrees of recognition to a wide range of technologies, from emerging to traditional, aligning with international standards and industry best practices.

TARF is scalable, allowing seamless integration of new technologies. It is targeted towards owners or operators of technology solutions, who want to assess and obtain recognition for their technology-related controls.

TARF’s official recognition aims to provide varying degrees of confidence for stakeholders like Lead Authorities, investors, developers, suppliers, end-users, and the public. The framework is flexible, allowing applicants to choose what they wish to be assessed against, with different assessment levels building upon each other for higher trust levels.

TARF’s Four Assessment Levels are:

Level 0 – Self-Assessment (sector-specific).
Level 1 – Technology Sandbox.
Level 2 – Technology Review.
Level 3 – Technology Assurance.
 

The MDIA provides official recognition depending on the Assessment Levels undertaken:

•    Acknowledgment: Denotes participation at TARF Level 0 (Self-Assessment).
•    Mark of Credit: Verifies Technology Review at TARF Level 1 or 2.
•    Certification: Provided for technology solutions that successfully undergo a TARF Level 3 assessment.
 

Any individual or legal person that develops, operates, or otherwise has rights to an Innovative Digital Product or Service (IDPS), may apply for the TARF. The Applicant must have a reasonable element of substance in connection to Malta and may apply for Recognition following the successful completion of the Application Form and procedures in line with the requirements established in the TARF guidelines.

The Applicant that wishes to apply for Assessment Levels 0 or 1 should contact the MDIA to be informed of the existing self-assessment utility that falls under Assessment Level 0 or the existing Sandbox Programme that falls under Assessment Level 1

The Applicant interested to apply for Assessment Levels 2 or 3 must submit the Application Form accessible on the MDIA website. 

Documentation may be submitted as either soft or hard copies. However, in the case of soft-copy submission, the Authority reserves the right to request hard-copy documents, with relevant wet-ink signatures to be submitted to the MDIA offices. 

Documents required:

The Applicant that wishes to apply for Assessment Levels 0 or 1 should contact the MDIA to be informed of which application forms and other documentation are relevant to complete and submit to the MDIA. 
The Applicant that wishes to apply for Assessment Levels 2 or 3 must submit the Application Form accessible on the MDIA website and as part of the Application Form, the Applicant must submit:

a) Type of Assessment Level, IDPS Domains and Control Types; 

b) The Preliminary Information indicating whether the Applicant is already and currently licensed by another NCA and a summary of the proposition of the Applicant; 

c) The details of the Applicant, Fit and Proper Questionnaires and all other documentation with respect to Due Diligence; 

d) The details of the Resident Agent, where applicable; 

e) IDPS Blueprint in line with the template provided;

f) Administrative fee details, where applicable; 

g) Outsourcing information, where applicable; 

h) Other supporting documents containing all information that may be required by the MDIA and its guidelines. 

The Applicant is required to contact the MDIA in writing with regards to the Fit and Proper Questionnaire. 

The Due Diligence required may vary depending on the selected Assessment Level. Details are provided in the relevant section detailing each respective Assessment Level.

The Authority shall have the right to review any of the details submitted by the Applicant as part of the relative application form and shall be entitled to request the Applicant to amend and/or update the Application Form and other related documents, including, but not limited to, the chosen Assessment Level, IDPS Domain and Control Types

The Authority may specify a timeline within which the Applicant must submit the amended and/or updated documentation. The Authority may conduct interviews with the Applicant or any one or more individuals that it deems necessary.