Southern Region Stakeholders Consulted on Proposed Data Protection Registration Fees
On 13 July 2026, the Malawi Communications Regulatory Authority (MACRA), in its role as the designated Data Protection Authority (DPA), held a stakeholder consultation meeting on draft data protection regulations at Mount Soche Hotel in Blantyre.
The meeting provided a platform for stakeholders to engage on the proposed registration fees and contribute to the development of a fair and effective regulatory framework. The DPA intends to introduce registration fees for data controllers and data processors of significant importance. The proposed fees will be based on an organisation’s annual turnover, with a minimum fee of K50,000 and a maximum of K7 million.
Speaking during the meeting, the Principal Secretary in the Ministry of Information and Communication Technology, Mr. Harold Msusa, reaffirmed the Government’s commitment to supporting a data protection regime that is transparent, inclusive, and responsive to the needs of both citizens and businesses.
“The turnover-based fee structure will ensure that larger organisations contribute more without creating barriers for smaller players,” said Mr. Msusa.
MACRA’s Head of Data Protection, Counsel Dan Chiwoni, said the Authority has developed a framework to guide the implementation of the new requirements while ensuring an appropriate balance between data privacy, innovation, and economic growth.
The consultation workshop brought together representatives from the private sector and other key institutions to provide their input on the proposed regulations and registration fees, reinforcing the Authority’s commitment to a participatory and consultative regulatory process.