Malta's Sanctions Monitoring Board (SMB) has issued new guidance clarifying what it expects of businesses building and running their sanctions compliance programmes.
Published on 20 August 2026, the guidance explains the requirements of Article 32 of the National Interest (Enabling Powers) Act (Chapter 653 of the Laws of Malta) and translates the Board's expectations into practical steps for operators.
The Board frames sanctions compliance as a matter of substance, not paperwork. "Effective sanctions compliance is about more than having policies and procedures in place," the SMB writes. "It is about ensuring that an organisation understands its sanctions risks and has appropriate controls in place to manage them."
What Article 32 requires
The guidance sets out the Board's expectations across the core building blocks of a sanctions compliance framework. Its key areas are governance, risk assessments, screening measures, escalation procedures, record-keeping and reporting obligations. These are the areas the Board will look to when assessing whether an operator can identify, manage and mitigate sanctions risk in practice.
A risk-based, proportionate approach
Rather than a one-size-fits-all checklist, the Board stresses that controls should be calibrated to each business. "As sanctions regimes continue to evolve, operators should regularly review their compliance frameworks to ensure that their controls remain effective and proportionate to the nature, size and risk profile of their business," the guidance states, adding that "what is appropriate for one organisation may not necessarily be appropriate for another."
That proportionality cuts both ways. Smaller operators are not expected to replicate the programmes of large institutions, but every operator is expected to understand its own exposure and to keep its controls current as designations and regimes change.
A reference point for operators
The SMB describes the publication as "a practical reference point for operators" to assess whether existing controls are "capable of identifying, managing and mitigating sanctions risks in a meaningful and effective manner."
It positions the document as useful both to firms auditing a programme they already run and to those still assembling one, giving each a sharper read on the standard it will apply and on the concrete steps needed to meet it.
Why it matters
Malta sits within the European Union's sanctions architecture, and the SMB is the national body responsible for implementing and monitoring restrictive measures. Clear expectations on governance, screening and reporting give operators a benchmark to test their programmes against. For businesses exposed to cross-border activity, the guidance prompts them to revisit screening coverage, escalation paths, and record-keeping before the next regime change rather than after.
The Sanctions Monitoring Board provides the full guidance, with the detailed requirements set out in its Article 32 publication.
