D&O cover gap review in Malta: scope and consequences

A D&O cover gap review in Malta tests whether the indemnity a company has bought its directors actually reaches the personal liability the Companies Act creates, and whether the two are described in the same terms. There is no statutory requirement in Malta for a company to carry directors' and officers' insurance, so a board that has never checked this can be uninsured and still believe it is covered. This page sets out what the review looks for once a company is registered in Malta, what becomes visible on a public register as a result, and where the boundary of the review sits.

A Malta-registered holding company renews its D&O policy every year without anyone reading the exclusions against the duties the board actually owes. The renewal is treated as an administrative task until a shareholder dispute or a regulatory inquiry tests the policy against a specific duty, at which point the wording nobody checked becomes the wording that decides whether a director pays personally.

What follows sets out the local test that drives this review, what it produces for the register and the file, and what the engagement does not extend to under Maltese licensing rules.

What changes in Malta

Malta uses a single-tier board and imposes no general legal requirement to hold directors' and officers' insurance. The board of directors is the company's mandatory management body under the Companies Act, and its members remain personally exposed to the duties that body carries whether or not a policy has been bought against that exposure. 01 That absence of a mandate is often read as an absence of risk, which is the opposite of what it means. A group moving a holding company to Malta, or adding a Maltese subsidiary to an existing group, inherits a duty regime the parent's own insurer may never have priced.

The review starts from the duties, not from the policy. Directors' duties and personal liability in Malta sit with each individual who holds office, and a policy written against a template drafted for another jurisdiction routinely excludes exactly the exposure Maltese law creates, most often around conflicts of interest and continuing to trade once the company is known to be insolvent. For the general scope of this work outside any single jurisdiction, see the D&O cover gap review service page; the equivalent review runs to a different test for a Dutch board, set out for the Netherlands.

The local requirement that drives a D&O cover gap review in Malta

The test is not whether Malta requires D&O insurance – it does not – but whether the duties a Maltese director owes are the duties the policy actually describes. Acting as a director for a company outside one's own group, on a business basis, is a licensed activity in Malta and is regulated as company service provision; arranging for another person to take up that office is caught by the same requirement. 02 Where a group arranges for an individual to take up a Maltese directorship without first confirming that the arrangement itself does not require a licence, the exposure becomes personal to whoever arranged it the moment the appointment takes effect, and resigning the appointment afterward does not undo it.

Board of directors composition is the second variable the review checks. A sole director structure, common in smaller Maltese companies, concentrates the exposure the policy has to reach into one person; a board with several members spreads it, but only if each member's specific responsibilities are named somewhere the insurer can point to. Where a shareholder or a parent company gives the instructions the board simply follows, the exposure can extend beyond the person on the register, and it is worth checking how the shadow directorship concept is applied across comparable jurisdictions before assuming the registered director is the only office at risk. Doing business in Malta through a locally incorporated entity does not dilute either point; it sharpens it, because the register that records who holds office is the same register a claimant or a regulator checks first.

The filing, register or forum consequence

None of this stays private to the board. The statutory filing lodged with the Malta Business Registry records the identity of each director in office at the relevant date; neither the existence of a D&O policy nor its terms is itself a matter recorded on that public file. 03 A gap review has to work with that asymmetry: the office is public, the cover is not, and a counterparty checking the register learns who is exposed without learning whether that person is insured against it.

The beneficial owner overlay adds a second layer. Malta's beneficial ownership register, held at the Malta Business Registry, is subject to a legitimate interest test for third-party access rather than unrestricted public search. 04 Where the same person appears as director and as beneficial owner, which is common in owner-managed structures, a claim against the office and a claim against the ownership can proceed through different forums, and the review has to note which route applies before a policy is tested. A director who receives an information request from a shareholder faces a related but separate question, covered in information rights enforcement in Malta.

A board that has never matched its policy wording to its actual duties usually finds this out at the worst possible moment, when a claim is already being assessed rather than when the renewal invoice arrives. Confirming the match now, while no claim is in progress, is the only point at which every option is still open.

Assess your director exposure. Write to info@hreithlaw.com with the jurisdiction and the structure.

What this service does not include in Malta

The review does not include acting as a director, secretary, nominee shareholder or trustee for the company under review, and it does not include supplying, sourcing or arranging any of those roles. Carrying on that activity in Malta without the licence a company service provider needs is an offence, and the exposure attaches to the individual who acts, not only to the company through which they act. 05 That is a licensing boundary, not a preference: the firm holds no trust or corporate service provider licence in Malta or anywhere else, so once a step in a client's plan requires one, the option of the firm completing that step itself closes off, and it ceases to be available for the length of the engagement.

What the review does produce instead is a mapped exposure: the duties the office actually carries under Maltese law, set against the wording of the policy in place, with the gaps between the two listed by clause rather than described in general terms. Where the appointment terms themselves need checking against that exposure, that review sits alongside the cover review as a separate, related piece of work. For a shorter overview of how the two connect, see how a cover gap review starts.

• The duties attaching to each director in office, taken from the board's own minute book, not a template.
• The clauses in the current policy that exclude or limit cover against those specific duties.
• Whether the beneficial ownership position changes who is exposed to what.
• The statutory filing already made at the Malta Business Registry, checked against who is actually in office.

Where a Maltese subsidiary sits inside a larger group, the parent's own D&O programme may or may not extend to it, and a certificate of insurance rarely answers that question on its own. Reading the policy against the Maltese board's actual duties settles it either way.

Assess your director exposure. Write to info@hreithlaw.com with the jurisdiction and the structure.

Frequently asked questions

What evidence should the board keep on a D&O cover gap review in Malta?

Keep the policy itself, the schedule of directors in office at each renewal date, and a short note matching each duty under Maltese company law to the clause that either covers or excludes it. A renewal certificate alone tells a claimant nothing about whether the exclusions match the duty being tested.

What happens if a D&O cover gap review in Malta is not carried out?

Nothing happens immediately, which is the risk. The gap surfaces only once a claim, a regulatory inquiry or a shareholder dispute tests the policy wording against a specific duty, by which point the exposure for the period already covered cannot be reduced by buying better cover afterward.

How often should a D&O cover gap review in Malta be repeated?

At each policy renewal, and separately whenever the board's composition changes or the company takes on a transaction that changes what the directors are exposed to, such as a related-party sale or an insolvency filing. A review done once at incorporation and never repeated answers a question the company no longer faces.

Does a D&O cover gap review in Malta change for a foreign-owned company?

The duties tested do not change because the shareholder is abroad, but the review usually adds one step: checking whether the parent's own policy is intended to extend to the Maltese subsidiary, and whether the Maltese board's duties are even the duties that policy was written to cover. A director appointed only as a formality is still personally exposed under Maltese law regardless of how the group structured the appointment.

What does a D&O cover gap review in Malta require in practice?

It requires the current policy, the minute book, and the filed record of who holds office, read together rather than separately. The output is a list of specific gaps mapped to specific duties, not a general opinion on whether the company is adequately insured.

Elena Marsh, Partner. Elena advises boards and holding companies on the interface between statutory director duties and the insurance bought against them, working from the duty outward rather than from the policy inward. Her focus is the point at which a policy written for one jurisdiction is asked to answer for a company registered in another. She does not act as a director, secretary or nominee for any client.