Malta - Tier A · Exposed · Case: MAPFRE Malta
Posted: Sun Oct 11, 2026 8:15 am
Fijishi Jurisdiction Index 2026 · Entry MT · Published 12 October 2026
At a glance
1. The rules in Malta
On 4 June 2026 the Malta Financial Services Authority told licence holders that boards must retain effective oversight of AI systems and remain accountable for their use, including where those systems are provided by third parties.
The Authority expects each firm to complete an AI self-assessment, may ask to see it in ongoing supervision, and will include AI in onsite inspections and thematic reviews.
Who these rules reach
This band describes how clearly the rules meet the AI use that MAPFRE Malta has itself published. It is not a finding that MAPFRE Malta has breached any rule.
Why MAPFRE Malta: MAPFRE's own 2019 release launched the Emma chatbot, and Emma was observed on mapfre.com.mt on 27 September 2026.
The question
3. The same question for other firms in Malta
Any licence holder in Malta running a customer-facing AI system, including one built by a supplier, faces the same point: whether its board has brought that system within its accountability, and whether its self-assessment covers it. This entry gives no band to any firm other than MAPFRE Malta.
4. What this entry does not establish
Sources
________________________________________
Commercial relationship with any party named here: None · Right of reply: indexreport.protocol@fijishi.com; with the sender's agreement, replies are published in full below the entry, dated · Cite as: Fijishi Jurisdiction Index 2026, Entry MT · Corrections: none.
At a glance
| Jurisdiction tier | Tier A - Specified and enforced. A binding instrument that applies to insurers' own use of AI, or an issued regulator document addressed to this insurance market, addresses AI - by name or by an unambiguous description such as "predictive models" or "automated decision system" - and sets out rules or expectations that apply to it; and the regulator has a live mechanism to check or sanction them. |
| Case examined | MAPFRE Malta - the Emma customer chatbot |
| Band for this case | Exposed |
| Rules reach | Insurers: directly · Reinsurers: not stated · Intermediaries: not stated |
| Last verified | [actual date of the launch-window check] |
On 4 June 2026 the Malta Financial Services Authority told licence holders that boards must retain effective oversight of AI systems and remain accountable for their use, including where those systems are provided by third parties.
The Authority expects each firm to complete an AI self-assessment, may ask to see it in ongoing supervision, and will include AI in onsite inspections and thematic reviews.
Who these rules reach
- Insurers: directly. The letter says: "You are receiving this letter as a licence holder supervised by the Malta Financial Services Authority". MAPFRE Malta is a licence holder.
- Reinsurers: not stated.
- Intermediaries: not stated.
This band describes how clearly the rules meet the AI use that MAPFRE Malta has itself published. It is not a finding that MAPFRE Malta has breached any rule.
Why MAPFRE Malta: MAPFRE's own 2019 release launched the Emma chatbot, and Emma was observed on mapfre.com.mt on 27 September 2026.
The question
In briefMAPFRE Malta launched its "Emma" chatbot for customer quotes and claims queries in 2019, and Emma was observed on mapfre.com.mt on 27 September 2026. On 4 June 2026 the MFSA told licence holders that boards "must retain effective oversight of AI systems and remain accountable for their use, including where such systems are provided by third parties", and expected each firm to complete an AI self-assessment the MFSA may ask to see in supervision. Has MAPFRE Malta's board brought Emma - and any vendor relationship behind it - within that accountability, and does its self-assessment cover it?
Why this band: The rule in the question is mandatory in its terms, names AI and has a fixed date, and the question points to one board and one system.A customer-facing AI assistant launched in 2019 is still running on MAPFRE Malta's website, and since June 2026 the MFSA expects boards to own their AI systems, vendor-built ones included, and to be ready to show a self-assessment on request - whether Emma is in that assessment has not been publicly disclosed.
3. The same question for other firms in Malta
Any licence holder in Malta running a customer-facing AI system, including one built by a supplier, faces the same point: whether its board has brought that system within its accountability, and whether its self-assessment covers it. This entry gives no band to any firm other than MAPFRE Malta.
4. What this entry does not establish
- Whether the Emma observed on 27 September 2026 is the same system that a supplier's 2021 case study says it built, and whether it handled claims queries on that date. The 2026 observations show product selection only.
- The company's current legal name is Mapfre Malta p.l.c.; the site header reads "Mapfre Malta & Msv Life".
- This case examines what the published record shows; it says nothing either way on what MAPFRE Malta's self-assessment contains.
- 11 October 2026: final re-observation of Emma on mapfre.com.mt before launch.
Sources
- MAPFRE Middlesea, release on Emma, 13/06/2019 (printed). Company's own. mapfre.com.mt
- EBO.ai, "How Emma, Virtual Agent From Mapfre, Is Handling Customer Service Needs", 13th August 2021 (printed). Supplier's account. ebo.ai
- Malta Financial Services Authority, Dear CEO letter, "Artificial Intelligence (AI) – Governance, Risk and Prudential Expectations", 04 June 2026 (printed). Regulator. mfsa.mt PDF
- Observed on mapfre.com.mt, 27 September 2026 and 6 October 2026. Fijishi's own observations, kept on file.
________________________________________
Commercial relationship with any party named here: None · Right of reply: indexreport.protocol@fijishi.com; with the sender's agreement, replies are published in full below the entry, dated · Cite as: Fijishi Jurisdiction Index 2026, Entry MT · Corrections: none.