By Dean Chisambo
The Malawi Communications Regulatory Authority (MACRA) is intensifying its efforts to implement the Data Protection Act in a lawful, transparent, and fair manner, aimed at ensuring the collection, storage, and use of personal data is properly regulated.
This was emphasized by a MACRA Board Director during a Data Protection Workshop held for Ministries, Departments, and Agencies (MDAs) on Wednesday in Lilongwe.

MACRA Board Director Songea highlighted that the workshop provided an important opportunity to discuss key requirements outlined in the Data Protection Act of 2024.
He noted that Malawi has been making progress in the area of data protection even prior to the enactment of the new law.
“The only new aspect of this law is that it creates specific mandates for various stakeholders and data controllers,” Songea explained.
He further warned that non-compliance with the law will carry certain liabilities, most of which will be administrative in nature.
Songea also pointed out that the misuse of personal information remains a major concern, and the new law is designed to place responsibility on individuals and institutions handling such data.
He added that capacity building among stakeholders is essential to support the effective implementation of the law and ensure full compliance.
On his part, Mark Chonde, a participant from the Reserve Bank of Malawi, emphasized the importance of the workshop, urging stakeholders not to take it for granted.
“When we collect data, we have to make sure it is stored properly and handled in a secure and appropriate manner,” said Chonde.
The Data Protection Act, introduced in 2024, aims to safeguard citizens’ personal data and establish clear standards for how that data is collected, used, and protected in Malawi.