MACRA Consults Stakeholders on New Data Protection Regulations

The Malawi Communications Regulatory Authority (MACRA) , in its capacity as the country’s designated Data Protection Authority (DPA), has held a stakeholder consultation on draft data protection regulations aimed at strengthening Malawi’s data protection framework.

The consultation, held at Mount Soche in Blantyre, brought together representatives from the private sector and other key institutions to discuss proposed registration fees for data controllers and data processors deemed to be of significant importance. The meeting provided stakeholders with an opportunity to review the proposals and contribute to the development of a fair and effective regulatory framework.

Under the proposed regulations, registration fees would be based on an organisation’s annual turnover, with charges ranging from a minimum of K50,000 to a maximum of K7 million. According to the government, the turnover-based structure is intended to ensure that larger organisations contribute more while avoiding undue financial burdens on smaller entities.

The Ministry of Information and Communication Technology said the government remains committed to building a data protection regime that is transparent, inclusive and responsive to the needs of both citizens and businesses.

MACRA also said it has developed an implementation framework to guide compliance with the proposed requirements while maintaining a balance between protecting personal data, fostering innovation and supporting economic growth.

The consultation forms part of the Authority’s efforts to gather stakeholder input before finalising the regulations that will govern the registration and oversight of significant data controllers and processors in Malawi.