Malta: home grow, CHRA membership and ARUC rules explained

As of 27 September 2026, Malta allows two lawful ways to grow or access cannabis: home cultivation of up to four plants per household, and membership of a licensed Cannabis Harm Reduction Association (CHRA), a non-profit club regulated by the Authority for the Responsible Use of Cannabis (ARUC). Both routes are dated here to the clause, because Malta runs this law through an Act, two regulations and a stack of numbered ARUC directives that are amended far more often than the statute itself.

• Home cultivation4plants per household
• Home possession50g stored at home
• CHRA daily allowance7g per member
• CHRA monthly allowance50g per member
• CHRAs operating24Sep 2026ARUC operational register

The legal stack: one Act, two regulations, six live directives

Malta's cannabis law sits in layers, and which layer you're reading matters more than it does in most countries, because ARUC does most of its actual regulating below the level of the Act. The Authority for the Responsible Use of Cannabis Act (Cap. 628) established ARUC, came into force on 18 December 2021, and was last amended on 16 May 2025 ^[1]. Underneath it, the Responsible Use of Cannabis (Licensing of Organisations) Regulations (S.L. 628.01) carry almost all of the operative detail for associations: membership caps, governance, premises, sanctions, and it too shows a point-in-time of 17 February 2026 on Malta's legislation portal, suggesting it was amended alongside what came next ^[2]. A newer instrument, the Responsible Use of Cannabis (Possession of Cannabis by Associations) Regulations (S.L. 628.02), was introduced in mid-February 2026 to cover association-level possession specifically. Its full text was not publicly readable at the time of writing, so treat any possession figure that might trace back to it as provisional until a primary text is confirmed ^[3].

Above both sits a stack of numbered ARUC directives, which is where the day-to-day rules actually live and which ARUC revises far more often than the Act or the regulations. Six are currently in force; a seventh, Directive 5, was issued and repealed within weeks in 2023, and ARUC has never said what it covered ^[4]. Directive 1 (Technical Standards and Approved Operating Practices) is on its fourth version, effective 16 January 2026. Directive 2 (Harm Reduction Practices) and Directive 6 (Governance and Administration) are both on version 2.0, from 5 July 2024. Directive 3 (Approved Premises) reached version 3.0 on the same date as Directive 1's fourth version, and Directive 7 (External Communications) has stood at version 1.0 since November 2023 ^[4]. Every rule below is dated to the version it comes from. If you're reading this more than a few months after the date above, check ARUC's own directive index before you act on a number.

Home cultivation: four plants, fifty grams, kept out of sight

An adult resident may grow cannabis at home without a licence, within three limits that appear consistently across every source checked for this page, including ARUC's own published guidance: up to four plants per household, up to 50 g of dried cannabis stored at the property, and cultivation that stays out of public view ^[5][6]. The four-plant figure is a household cap, not a per-adult one: a flat of four housemates does not get sixteen plants between them, they still share four — the same per-household-versus-per-adult distinction that trips growers up in several other countries' plant-count rules. None of the six ARUC directives touch home growing at all, since ARUC's remit is licensing CHRAs, not individuals. The home-grow figures instead trace back to Malta's 2021 amendments to earlier drug legislation, and this article could not confirm the precise article numbers against the current consolidated statute text itself. Treat four plants and 50 g as corroborated by the regulator's own public-facing page as well as independent secondary sources, but not as something checked here against the primary statute text, and re-check before treating it as certain for a decision that carries a penalty.

Four plants can also produce noticeably more than 50 g at harvest even when the storage limit only allows 50 g on hand at any time — exactly the possession-versus-cultivation collision covered in possession limits vs cultivation limits.

Malta's rules at a glance

The two lawful routes differ enough that it helps to see them side by side before the detail below.

Joining a CHRA: eligibility, the 500-member ceiling and the path in

A CHRA is a licensed, non-profit association whose sole purpose is collective cultivation and distribution of cannabis to its own adult members; it cannot be a side activity of a wider organisation ^[6][7]. To join one, a person must be 18 or older and resident in Malta ^[7], and show a Maltese government-issued ID card or residence card at enrolment ^[8]; tourists are excluded outright ^[6]. Membership is limited to one CHRA at a time, enforced through a signed declaration at enrolment and, per ARUC, through a central anonymous enrolment system intended to stop someone registering with two associations at once; how that system actually works has not been published ^[6][8].

Every CHRA is capped at 500 members, and the ceiling is treated as close to absolute: Directive 6 sets out that a motion to allow an association more members than that cannot be brought at all, under any circumstances ^[9]. As of September 2026, ARUC's own public register lists 24 operating associations ^[10].

1. Step 1

   Enrol once, anonymously

   Register through ARUC's central enrolment system before joining any association.

   One association only
2. Step 2

   Join one CHRA

   Sign the Declaration of Association: the limits, the age tier and the non-medical disclaimer.

   Directive 2, Annex A
3. Step 3

   ID and age check

   Maltese ID or residence card checked before every visit; under-18s and tourists are refused.

   18+ · Malta resident
4. Step 4

   Draw within the cap

   Up to 7 g a day and 50 g a month, flower and resin-equivalent combined.

   7 g/day · 50 g/month
5. Step 5

   Lab-tested, labelled product only

   Every packet is tested, sealed and labelled to ARUC's template before it reaches a member.

   ISO 17025 or GMP lab

How much a member can take home: the 7 g/50 g cap and the resin gap

Every member's allowance is 7 g a day and 50 g a month of dried flower ^[8]. Since 6 May 2025, that limit has also covered resin: a CHRA may produce and distribute solventless cannabis resin made only from its own tested flower, and resin counts toward the same daily and monthly total rather than sitting outside it ^[11]. (ARUC's own announcement carries no year, only "6 May"; 2025 is inferred here from the fact that Directive 1's July 2024 version still banned resin outright, and the version that lifted the ban was uploaded in May 2025 ^[4][11].) Resin's contribution is converted to a flower-equivalent weight by a multiplier tiered by tetrahydrocannabinol (THC) content, which replaced a flat 1 g resin = 3 g flower rule in January 2026: product over 66% THC counts three times its weight in flower, 34–66% THC counts twice, and 33% or below counts once ^[12].

Whether "per month" means a calendar month or a rolling 30 days is also not stated anywhere ARUC has published. A member close to the limit late in a long month should track both readings and stay under whichever is stricter, since a calendar month and a rolling 30 days can disagree by several grams depending on the date.

THC ceilings for members aged 18 to 20

Members who are 18, 19 or 20 face an extra limit that members 21 and over do not: product distributed to them is capped at 18% THC, with ARUC advising associations to keep it under 15% where they can ^[6][8]. There is no equivalent product-THC ceiling stated for members 21 and over — the 7 g/50 g quantity cap is what limits them, not a potency cap.

Testing, labels and what a CHRA cannot do

Everything a member receives has been through a fixed testing and labelling regime, not just a visual check. Product must be tested by a lab that is accredited to ISO/IEC 17025 (the general standard for lab competence) or certified to Good Manufacturing Practice (GMP), under a contract ARUC has approved, with results sent to ARUC directly by the lab ^[13]. Every batch is tested for microbial counts, moisture and foreign matter before release; mycotoxins and heavy metals are tested initially by ARUC and then periodically at its request, not on every batch ^[13]. The full cannabinoid profile is tested on the first three batches of a new product profile and then on every twentieth batch after that ^[13]. Packaging follows an ARUC label template, carries a THC-gradient potency indicator and a numbered, tamper-evident ARUC seal, and holds no more than 7 g, one strain profile and one product class per packet, so a packet is traceable back to the batch it came from ^[8][13].

What a CHRA cannot do is set out almost as precisely as what it can. Directive 7 works as a whitelist rather than a blacklist: any form of external communication it does not explicitly name is not allowed ^[14]. In practice that rules out advertising in the ordinary sense, and it specifically bars publishing a strain list or a price list anywhere the public can see it — a members-only, two-factor-gated website or a fully private social media account is fine; anything public-facing is not ^[14]. Associations cannot sell to the public, only distribute to their own registered members within the caps above, and cannot transfer cannabis material to or from another association under any circumstance ^[8][14].

What's still unconfirmed, and where to check the primary text

Three details a careful reader will want are not published anywhere ARUC has made available: how long an association has to keep its records for, what channel it uses to submit the periodic reports the directives require, and the format of the unique identifiers ARUC assigns to batches and distributed units. None of these change what a member can lawfully hold or receive, but they matter to anyone building a compliance process around this page, and this article will not invent a figure to fill the gap.

For the primary text behind everything above, ARUC publishes its directives and news at aruc.mt and its operational register at aruc.mt/operational-chras; Malta's consolidated statute sits at legislation.mt. This page was last verified against both on 27 September 2026. For how a comparable club-based market runs at roughly ten times the scale, see Germany's home-grow and Anbauvereinigungen rules; for what running a Maltese association day to day actually involves, see cultivating for a CHRA's members.