LexLint.ioBeta

Know the law your code answers to.

Law / Malawi

Data Protection Act, 2024

Data Protection Act, 2024

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://macra.mw/2025/06/24/macra-engages-mdas-in-data-protection/

In force since .

A comprehensive regime rule binding public and private bodies.

Enforcement body
Malawi Communications Regulatory Authority, acting as the Data Protection Authority

What it requires

  • Comply with the Data Protection Act, 2024's rules for collecting, processing, storing, and sharing personal data, whether the personal data belongs to a private individual or is held by a public organisation.
  • Expect the Malawi Communications Regulatory Authority, acting as the Data Protection Authority, to regulate, monitor, and enforce compliance with the Act.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST Privacy Framework
  • GV.PO-P5Legal, regulatory, and contractual requirements regarding privacy are understood and managed.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

The Malawi Communications Regulatory Authority (MACRA) describes the Act as positioning MACRA itself as the Data Protection Authority, charged with regulating, monitoring, and enforcing compliance around how personal data is collected, processed, stored, and shared across sectors, and as promoting responsible management of personal data by both public and private organisations. Section 1 of the Act lets the Minister appoint the date on which the Act comes into operation.

By a notice of commencement published in the Malawi Gazette Supplement of , the Minister of Information and Digitalization appointed as the date on which the Act came into operation.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .