Public Notice
CALL FOR WRITTEN SUBMISSIONS ON PROPOSED REGISTRATION FEES FOR DATA CONTROLLERS AND DATA PROCESSORS OF SIGNIFICANT IMPORTANCE
1. The Malawi Communications Regulatory Authority (MACRA), in its capacity as the designated Data Protection Authority, is responsible for the implementation of the Data Protection Act 2024.
2. Pursuant to Section 41(1) of the Data Protection Act, the Authority is mandated to register all Data Controllers and Processors of Significant Importance.
3. Any natural or legal person processing or intending to process personal information of more than 10,000 Data Subjects who are resident in Malawi or personal information of significance to the economy, society, or security of Malawi is a Data Controller or Processor of Significant Importance and must therefore register with the Authority.
4. The Authority intends to set registration fees for Data Controllers and Data Processors of Significant Importance stated below and hereby invites the public and all concerned stakeholders to submit written comments on the proposed fees. The comments must be submitted to dg@macra.mw by 24th July 2026, with a copy to info@dpa.mw.
Data Protection Events
Data Controller Workshop
The Data Protection Authority invited various Data Controllers and Processors in Malawi to participate in a Data Controller Workshop, held from February 11th to 12th, 2025.
The workshop aimed to educate institutions on best practices for handling personal data, raise awareness about data privacy and online security, and emphasize the critical role of effective data management in shaping the future of Africa’s data governance.