In accordance with the Data Protection Act, Cap 440, the Governor of the Central Bank of Malta is considered as the Data Controller under the Act. The Board of Directors is ultimately responsible for compliance with the Act. Within the Bank responsibilities for the day-to-day matters are delegated to a Data Protection Officer appointed by the Board of Directors.