12 JUL 2023 · Law / Act

Data protection authority governance in Malawi Data Protection Bill 2023

On 7 December 2023, the Data Protection Bill 2023 was introduced in the Malawi Parliament. The Act establishes the Malawi Communication Regulatory Authority as the designated data protection authority. The Authority would be responsible for the implementation and enforcement of the Act’s obligations and determine the countries providing adequate data protection standards for cross-border data transfers.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

12 JUL 2023 · Law / Act

Cybersecurity regulation in Malawi Data Protection Bill 2023

On 7 December 2023, the Data Protection Bill 2023 was introduced in the Malawi Parliament. The Bill requires data controllers and processors "to implement appropriate technical and organisational measures to ensure the security of personal data". The personal data must be pseudonymised, encrypted, and available and accessible in case of an incident. Data controllers are subject to a 72-hour notification period in case of a data breach. Further, periodic risk assessments of the data processing...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified