On 15 September 2026, Malta published Legal Notice 241 of 2026, the Entry Exit System (EES) Regulations, 2026. It is a short, technical instrument. It creates no new visa, changes no residence programme and sets no new fee. What it does is wire Malta's own authorities into the EU's digital border register, and in doing so it restates, in Maltese law, who is inside that register and who is outside it.
If you are a non-EU national living in Malta on a residence permit, that second part is the one that concerns you. You are, in principle, outside the system. The practical question is whether the officer at the border knows that when you step up to the booth.
What the EES is, in one paragraph
The Entry/Exit System is the EU's automated register of short-stay travellers. According to the official EU travel site, it registers non-EU nationals travelling for a short stay, meaning up to 90 days in any 180-day period, each time they cross the external borders of the 29 European countries using the system. Malta is one of them. The system records name, travel document data, fingerprints, a facial image, and the date and place of each entry and exit. It also records refusals of entry.
The European Commission set 12 October 2025 as the launch date for a progressive six-month roll-out. The Commission's EES policy page records that the system became fully operational on 10 April 2026, and that since then it replaces the stamping of passports, allowing the automatic detection of overstayers.
That last point is the one that changes daily life. For decades, the proof of when a non-EU traveller entered and left the Schengen area was ink in a passport. For short-stay travellers, that proof is now a digital file.
What Malta's Legal Notice adds
The EES itself runs on EU regulations that apply directly in every member state. Malta's regulations are national implementing measures. The Minister responsible for immigration made them under article 8 of the Immigration Act (Cap. 217), and regulation 1(2) lists the EU acts they give effect to: the EES Regulation (EU) 2017/2226, the amendment to the Schengen Borders Code in Regulation (EU) 2017/2225, the two interoperability regulations of 2019, and Regulation (EU) 2025/1534 on the progressive start.
The substance of the Legal Notice falls into four blocks.
Who is covered. Regulation 1(3) applies the rules to third-country nationals admitted for a short stay who are subject to border checks, to certain family members of EU citizens who do not hold a residence card, and to people refused entry for a short stay.
Who is not covered. Regulation 1(4) lists the exclusions. The most important for residents are:
- family members of EU citizens who hold a residence card under Malta's free movement rules (S.L. 460.17);
- residence permit holders as defined in Article 2(16) of the Schengen Borders Code;
- holders of long-stay visas;
- people using intra-corporate transfer or research and study mobility rights;
- nationals of Andorra, Monaco and San Marino, and holders of a Vatican City passport;
- people exempt from border checks or benefiting from specific rules at the border.
What the system does. Regulation 3 sets out its functions: recording the date, time and place of entry and exit, calculating the duration of the authorised stay, generating alerts when the authorised stay has expired, and recording refusals of entry. It may also be used to prevent, detect and investigate terrorist offences and other serious crime.
Who in Malta may use the data. The Schedule names five competent authorities: the Principal Immigration Officer, the Malta Police Force, Identità, the Community Malta Agency, and the ministry responsible for foreign affairs for visa work by missions accredited to Malta. The Principal Immigration Officer is the central access point. Police requests for serious crime go through the SIRENE Bureau, and requests from the Malta Security Service through its Data Section. A personal data breach must be notified to the Malta Police Force, where possible within 48 hours.
One more detail matters for timing. Under regulation 1(6), the Legal Notice comes into force on a date or dates that the Minister sets by notice in the Gazette, and different provisions may start on different dates. The EU regulations underneath it already apply.
Why the card is the whole point
Here is the logic that makes a small plastic card important.
The exemption for residents is written around a document. The EU's list of who the EES does not apply to, which cites Article 2(3) of Regulation (EU) 2017/2226 as its legal base, speaks of "holders of residence permits and long-stay visas" and of family members "who hold a residence card". Malta's regulation 1(4) uses the same construction. The exemption is not triggered by where you live. It is triggered by holding the permit.
At the border, the officer sees a non-EU passport. Nothing in that passport says you live in Sliema or Gozo. If you present only the passport, you look exactly like a short-stay visitor, and a short-stay visitor is precisely the person the EES is built to register. The EU's description of the process is plain: on a first crossing, the officer takes a facial image and/or fingerprints, a digital file is created, and the passport is not stamped.
A resident who is registered as a short-stay visitor has a file that treats every day in the Schengen area as a day on the 90/180 clock. Regulation 3 tells you what the system does with that clock: it calculates the authorised stay and generates an alert when it has expired. For someone who actually lives in Malta, that is a record that describes the wrong person.
The EU's transition rules showed how much weight the document carries. During the six-month progressive start, Article 5(4) of Regulation (EU) 2025/1534 allowed national authorities to presume that a non-EU national with neither a stamp nor an EES file did not meet the conditions of stay. That presumption expressly did not apply to people who could provide credible evidence that they hold a residence permit or a long-stay visa. The roll-out period is over, but the principle it illustrates is not: the residence document is what separates a resident from a visitor in the eyes of the border system.
So the practical rule is simple. Travel with the passport and the residence card together, and hand both over whenever you cross an external border.
When the EES touches a Malta resident at all
The EES records crossings of external borders. A flight from Malta to Frankfurt, Rome or Paris stays inside the Schengen area and involves no border check of this kind. The situations where it matters are journeys that leave or re-enter the Schengen area:
- flights between Malta and a non-Schengen country such as the United Kingdom;
- long-haul routes such as the direct New York service;
- any trip home to a non-Schengen country, including the return leg into Malta or into any other Schengen state.
Each of those crossings is a moment where the card should be in your hand, not in a drawer in St Julian's.
Who in Malta should pay attention
Most non-EU residents in Malta hold a document that places them in the excluded group. That includes, among others:
- people with permanent residence under the Malta Permanent Residence Programme or the other routes set out in the realistic routes guide;
- holders of temporary residence permits, for example for work or study;
- holders of the Nomad Residence Permit;
- non-EU spouses and family members of EU citizens who hold a residence card.
EU, EEA and Swiss citizens are not in the EES at all, whether they live in Malta or not. Their non-EU family members are a different matter: without a residence card, they fall inside the regulation's scope under regulation 1(3)(b), although regulation 1(5) switches off the stay-duration calculation and the overstay alerts for them.
Three practical checks
Check the expiry date before you book. The exclusion covers holders of a residence permit. A card that has expired, or will expire while you are away, is a weak document to rely on at a border. Renewals run through Identità, and the morning at Identità in Msida is a reminder that the process takes planning.
Use the staffed booth when in doubt. Regulation 4 allows people whose border crossing is subject to EES registration to pre-enrol their data through self-service systems. That facility is designed for travellers who are meant to be registered. As a resident, you are not one of them, and a conversation with an officer holding your passport and card is the clearer path.
Tell your visitors what to expect. Friends and family from outside the EU who come to see you will be registered. On their first crossing they will give a facial image and/or fingerprints, and their passports will not be stamped. Their 90 days in any 180 are counted by the system, not by the ink. For long stays with you, that clock is theirs to watch.
What does not change
It is worth being clear about the limits of the Legal Notice. It does not alter any residence programme, any eligibility rule or any fee. It does not change the rights of EU citizens or their card-holding family members. It does not create a new application you have to make. It connects Malta's authorities to an EU system that is already running, names who may see the data and on what terms, and restates the exemptions that already exist in EU law.
For a non-EU resident, the change is not in the rules. It is in the evidence. The stamp that once quietly documented your travel is gone for visitors, and the system that replaced it assumes a non-EU passport belongs to a visitor unless you show otherwise. Your residence card is how you show otherwise.
Work with Sebastian
If you want to know which Malta residence route and tax status fits your passport, your income and your plans, book a consultation.
