Can I make a complaint about how my privacy was handled at a Malta clinic?

Yes, healthcare providers in Malta are subject to both specific medical confidentiality obligations under professional standards overseen by the Medical Council pursuant to the Health Care Professions Act, Chapter 464 of the Laws of Malta, and broader data protection obligations under GDPR, which specifically treats health data as a special category of sensitive personal data warranting particularly careful handling, meaning a clinic failing to maintain appropriate privacy and confidentiality standards regarding your health information would be falling short of both professional and legal obligations, and this is absolutely something you can formally raise a complaint about. Depending on the specific nature of what occurred, you have a couple of potential avenues for raising this concern: if your complaint centres more on a breach of professional confidentiality standards by the specific healthcare practitioner involved, raising this with the Medical Council would be appropriate, whereas if your concern relates more broadly to the clinic's general privacy practices, systems, or data handling procedures, a complaint to the Information and Data Protection Commissioner, which oversees GDPR compliance in Malta, might be the more directly relevant route, and in many cases raising the concern through both channels, or at least starting with a direct written complaint to the clinic itself, would be a reasonable approach. Clearly documenting exactly what you observed, including the date, location, and specific circumstances of the privacy concern, would strengthen whichever complaint route you pursue.