Why Workforce Oversight is the Missing Pillar of Modern Maltese Corporate Governance
Malta likes to see itself as a well‑governed jurisdiction; and to an extent, the structures exist and perform well. Codes, committees, and regulatory frameworks are familiar territory for most boards. What is far less familiar is treating the workforce with the same discipline, by way of control systems, incentives, and risk-mitigation that can either reinforce or quietly undermine everything else in the governance architecture.
Workforce oversight in many cases is still treated in a ‘traditional’ sense of informality, as repeated enforcement actions show that weak control over employment practices, contingent employment, and worker protections show signs of systemic good-governance failures. Failures that directly result in fines, arrears, and reputational damage.
A Governance Gap Hiding in Plain Sight
Malta’s corporate milieu is finding it hard to implement successful workforce oversight. This is often borne out not only from the lack of implementation, but the very thought of it; workforce oversight is, unfortunately, but regularly, treated as an afterthought. If organizations want to truly be risk-averse, avoid needless costly legal battles, and fines, they ought to fully comprehend how and why their workforce is a critical compliance and risk driver.
Culture, conduct, and control
It is the duty of every corporate board in Malta to treat human capital, culture, and employment compliance as core risk domains. Effective oversight encompasses:
Human capital and culture via formal board‑level scrutiny of recruitment, retention, succession pipelines, diversity, and employee sentiment, recognising these as leading indicators of operational risk and corporate behaviour.
Health, safety, and psychosocial risk. Good governance over occupational hazards, including proper registration, insurance, support for workplace injuries, and mental health provisions, which can otherwise escalate into legal and reputational crises.
Compensation architecture and incentives by way of alignment of pay, allowances, and variable compensation with long‑term strategy, risk appetite, and fair‑wage standards. Such measures are set in place to prevent systemic underpayment, arrears, or exploitative models that breach regulation.
Data, privacy, and algorithmic management. This is carried out through thorough oversight of workforce monitoring tools, platform‑based scheduling, and GDPR‑sensitive data collection, ensuring that employment models using digital platforms do not sidestep employment or privacy rules.
Corporate Governance in Malta is Traditional and Out of Date
In many Maltese firms, audit committees tend to remain focused on financial literacy and statutory compliance; leaving workforce, culture, and labour practices formally under‑governed. Crucially, mission‑critical risks, including human capital and culture, should be explicitly covered in committee mandates, information systems, and board agendas, rather than bundled into generic “HR topics.”
Furthermore, after servicing a multitude of clients in various industries, I’ve also realised early how much risk companies take on without knowing it, especially due to internal control failures. Ineffective control environments, inadequate risk management, and poor monitoring contribute to collapses in both financial and non‑financial firms. Applied to Malta’s context, persistent DIER findings and court decisions on employment irregularities indicate that workforce oversight has not yet been integrated into corporate governance architectures with the necessary rigour.
When boards embed workforce oversight into their governance structures through specialised committees, independent advisory, and robust reporting, they convert the workforce from a loosely managed cost into a controlled, auditable strategic asset.
The hidden cost of poor workforce oversight: how people‑pisk quietly bleeds cash
Weak workforce oversight often manifests in silent revenue leakage and escalated penalties. A clear and transparent example of this Payroll leakage and misclassification, especially for platform‑based and cross‑border models. Indeed, poor controls over overtime, allowances, and worker status generate arrears, back‑payments, and fines when regulators intervene.
Furthermore, companies face the risk of unregulated contingent labour. For example, recruitment agencies and fleet operators operating without full legal compliance face enforcement, court actions, and forced regularisation, reflecting governance gaps in how boards supervise third‑party labour models. In tandem, companies also face compliance‑driven operational disruption if they are found in breach of employment laws. Those employing foreigners without permits, for instance, face fines and corrective actions that disrupt operations and damage their ability to attract compliant labour.
There’s also cultural drift and turnover risks to consider. Exploitative or opaque employment practices in high‑pressure sectors erode trust, drive attrition, and invite union and civil‑society scrutiny. This, in turn, most certainly pressures regulators to act.
The point I want to drive is that these are governance failures, not simple HR missteps. They typically arise when boards delegate workforce control entirely to line management or transactional HR, without independent oversight, structured controls, or data‑driven risk reporting.
Malta’s good governance data paints a useful paradox. On paper, Malta performs reasonably well on Rule of Law and institutional indicators, yet regulators repeatedly uncover serious weaknesses in how employers manage workforce compliance and control. Malta ranks 31st out of 142 countries in the World Justice Project Rule of Law Index, with an overall score of about 0.63, above global averages on constraints on government powers (0.63 vs 0.54) and absence of corruption (0.64 vs 0.51), but below the EU/EFTA regional average on several dimensions, including regulatory enforcement where Malta scores 0.59 compared to a regional average of 0.72. This strongly suggests a legal and institutional framework that is broadly sound, but a gap between rules and their consistent enforcement evidently persists.
Regulators’ enforcement actions confirm that many employers’ internal controls have not kept pace. In 2024, the Department of Industrial and Employment Relations took 173 employers to court for employment law irregularities, recovering about €1.7 million in unpaid wages, overtime, bonuses, and other dues for workers, and initiating criminal proceedings in some cases. A 2024–2025 compliance drive targeting recruitment agencies saw DIER act against 30 firms and recoup over €1 million in unpaid wages, overtime, and bonuses, specifically within contingent and outsourced workforce structures that boards often see as “off‑balance‑sheet” employment. In 2025, DIER registered a total of 724 investigation cases, in which 78 workplace inspections took place and approximately 200 employees were interviewed. The lack of oversight and good governance seems to be growing,where board‑level responsibility is increasingly being tested in court.
Organizations should also be mindful of the latest developments. The Maltese government has increased penalties for employment law violations by raising fines up to €5,000 for first offences and €7,000 for repeat offences. It has also extended limitation periods, a clear signal that more serious governance over employment practices is expected. On the EU level, The Pay Transparency Act marks a significant shift in how employers in Malta manage recruitment, compensation, and HR compliance. It introduces greater transparency for both job applicants and existing employees while requiring employers to adopt more structured and accountable pay practices.
Corporate Case Patterns: What I See Going Wrong, Repeatedly
In my experience across industries in Malta, analogous patterns emerge when workforce oversight is absent or superficial.
First, I find that there is widespread over‑reliance on informal practices. Line managers regularly make ad hoc decisions on recruitment, pay, and scheduling with minimal documentation or cross‑functional review.
Second, HR departments are sometimes guilty of siloing; but it is seldom their own fault. Many a time, HR teams are asked to “run HR” but are excluded from strategic risk discussions, resulting in misaligned policies and unmonitored people risks. If a company’s board excludes the leaders it needs to execute corporate governance from the strategic table, how can they expect to mitigate the risks arising from workforce oversight – or more precisely a lack thereof? I must also make the point that this is not always done intentionally; as outlined earlier, corporate culture in Malta often fails to recognise leading indicators of operational risk de facto, which, although accidental, results in the same risks.
A third pattern I’ve seen repetitively over the years is that of reactive compliance. In many instances, companies scramble to address inspection findings once a compliance issue has already turned into an investigation. Recurring examples of this include employee claims, or regulatory updates. Undoubtedly, organizations should look into integrating workforce compliance into board‑level risk frameworks, well before issues arise.
Unfortunately, these patterns show a prevalent corporate governance model that erroneously assumes that financial and legal controls are sufficient, while the workforce is left to be “managed” operationally. The true missing pillar of modern Maltese corporate governance is a formalised, board‑level system for workforce oversight that treats people risk with the same rigor as financial risk.
Case Study: Platform delivery fleets’ workforce oversight
A recent DIER investigation into fleets serving renowned ride-booking service providers in Malta illustrates how a lack of workforce oversight translates into governance and financial consequences in Malta’s digital economy. The investigation found widespread breaches of the Digital Platform Delivery Wages Council Wage Regulation Order, including underpayment of minimum wages, overtime, bonuses, and failure to cover mandated expenses such as mobile and internet costs.
Out of 43 fleet operators, several failed to provide any information at all, leading DIER to proceed against them for non‑cooperation, while others were charged after documentation revealed systemic underpayment and misreporting of hours. Six operators admitted guilt and were fined, while over €200,000 in arrears owed to couriers was estimated. That is precisely a direct financial leakage driven by uncontrolled workforce structures and absent governance over third‑party employment models.
From a board‑level perspective, this case exhibits the risks of treating platform labour as “outsourced” and therefore outside corporate governance scope. The fleets’ corporate governance failed to ensure that employment models, pay systems, and documentation were aligned with regulatory expectations, leading to sanctions, reputational damage, and forced remediation.
Case Study: Construction and registration failures
Another recent case, involving a construction company highlights how workforce oversight failures around registration, injury management, and pay can escalate into court‑condemned corporate behaviour. An employee who suffered severe injury at work discovered his employment had never been registered with Jobsplus, leaving him ineligible for benefits and unpaid for wages, allowances, bonuses, and leave totalling over €17,000.
A Jobsplus investigation found multiple employees improperly registered, resulting in administrative fines, and the court strongly criticised the directors’ behaviour, fining them and calling for police investigation into possible perjury and false declarations. This reflects a breakdown of basic workforce registration controls, which inevitably lead to a direct revenue leak. Instigated by a lack of oversight on injury‑related obligations and compensation, this case shows the fallibilities that a culture of denial brings about, as opposed to structured compliance and risk management.
Such failures unfortunately reveal how workforce oversight in Maltese firms is neither systemic nor properly chaired by the board. It seems that workforce oversight predominantly depends on informal practices that collapse under regulatory scrutiny and judicial review.
Is the Change to Better Workforce Oversight Too Great?
I will be the first to argue that no! Companies can take immediate action to start mitigating people-risk, and start their journey to adequate compliance. First and foremost, Boards should prioritise:
Establishing dedicated human capital and workforce risk oversight by setting up internal committees with explicit mandates for labour compliance, culture, and workforce structure. Ideally, such committees should be supported by appropriate expertise and independent advisory. For the best outcome, organizations should align incentives with governance outcomes, which can be achieved by redesigning pay and progression frameworks so that managers are rewarded for adherence to governance structures
Integrate workforce data into risk reporting to ensure that human capital metrics, compliance incidents, and culture indicators are systematically reported alongside financial and operational risks.
Commissioning independent workforce audits by using external firms to stress‑test payroll, registration practices and compliance, contingent labour use, and cross‑border compliance against regulatory requirements and corporate risk appetite.
Integrating workforce metrics into enterprise risk management by ensuring that arrears, overtime patterns, injury incidents, registration compliance, and platform‑work arrangements appear in board risk discussion boards.
Aligning incentives and governance by redesigning compensation systems so that managers are rewarded for compliance, documentation quality, and workforce‑related risk reduction; as opposed to treating compliance and good governance as short‑term deliverables.
Some boards will inevitably ask whether the shift towards robust workforce oversight is too great a change, especially when margins are tight and the headcount is already stretched. But individual legal cases and macro data clearly show how quickly people‑risk converts into direct financial loss, legal exposure, and reputational damage when left unmitigated.
The most effective way for Maltese companies to mitigate these risks is to treat workforce oversight as a governance system at board-level, not just another project. That means assigning clear board‑level responsibility for people‑risk, embedding workforce data into enterprise risk dashboards, and subjecting HR architectures to the same independent scrutiny applied to financial controls.
Conclusively, when committees are mandated to oversee human capital risk, when independent advisors are engaged to stress‑test workforce structures, and when incentives reward compliance and documentation quality, people‑risk becomes measurable and therefore manageable. Workforce oversight, in this sense, is less of an additional burden on already busy directors and executives; it is the most direct way to convert an increasingly complex employment environment into a controlled, auditable, and strategically aligned asset.
