Malawi Proposes Tiered Data Protection Fees, Targeting Significant Data Handlers
Malawi’s regulatory landscape for data protection is set to evolve as the Malawi Communications Regulatory Authority (MACRA), acting as the designated Data Protection Authority (DPA), has initiated consultations on draft data protection regulations. These proposed rules aim to bolster the nation’s data protection framework, with a particular focus on the registration and oversight of significant data controllers and processors.
The consultations, recently held in Blantyre, convened representatives from the private sector and other key institutions. A central point of discussion was the proposed fee structure for organisations deemed to be of significant importance in handling personal data. This initiative underscores the government’s commitment, as articulated by the Ministry of Information and Communication Technology, to cultivating a data protection regime that is both transparent and responsive to the needs of citizens and businesses alike.
Under the proposed regulations, registration fees will be determined by an organisation’s annual turnover. Charges are slated to range from a minimum of K50,000 to a maximum of K7 million. This tiered approach is designed to ensure that larger entities, which typically process more data, contribute proportionally more to the regulatory framework, while simultaneously mitigating undue financial burdens on smaller businesses.
MACRA has also developed an implementation framework intended to guide compliance with the forthcoming requirements. This framework seeks to strike a crucial balance between safeguarding personal data, fostering innovation within the digital economy, and supporting overall economic growth. The authority’s proactive engagement with stakeholders signifies a deliberate effort to gather comprehensive input before finalising regulations that will govern the registration and ongoing oversight of significant data controllers and processors within Malawi. This move is critical for businesses and legal professionals navigating the evolving compliance requirements in the region.
