Rising Data Costs Threaten Malawi’s Business Growth and Investment Stability
Key Business Points
- Budget for new compliance costs — firms handling data for 10 000 or more people must register by September 1 with annual fees from K50 000 to K7 million based on turnover
- Engage in the consultation process — Macra is still gathering feedback on the draft regulations and fee structure before final implementation
- Prepare data systems now — the Data Protection Act 2024 requires prescribed standards for collection processing storage and sharing of personal information
Malawi businesses face new mandatory registration fees starting September 1 under the Data Protection Act 2024. The Malawi Communications Regulatory Authority (Macra) has proposed annual charges ranging from K50 000 for small and medium enterprises to K7 million for large organisations depending on annual turnover and eligibility. The fees apply to any firm or organisation that handles personal data for at least 10 000 individuals across sectors including education agriculture health and financial services.
During a stakeholder consultation workshop in Blantyre Game Haven Lodge managing director Greg Gange-Harris said the proposed charges are too high for many companies. His firm would owe about K4 million annually though he suggested K1.5 million would be more reasonable. He acknowledged that data protection regulations are critical for business development and building trust with customers but warned the current fee structure could strain operations.
Macra head of data protection Daniel Chiwoni said the consultation aims to collect views on the draft regulations guidelines and proposed fees before implementation. The regulator is committed to developing a consultative and evidence based data protection regime that balances personal data protection with innovation investment and economic growth. Chiwoni emphasised that effective implementation requires clear regulations practical guidance and a framework that is fair transparent and responsive to realities faced by both public and private sectors.
Ministry of Information and Communications Technology Principal Secretary Harold Msusa said government wants a framework that protects citizens personal data without becoming a barrier to innovation entrepreneurship and investment. He noted government appreciates Macra’s turnover based approach which ensures larger organisations with greater resources contribute proportionately more than smaller entities.
The Data Protection Act 2024 provides Malawi’s legal framework for the collection processing storage and sharing of personal data with Macra designated as the Data Protection Authority responsible for enforcing compliance. The law requires organisations handling large amounts of personal data to meet prescribed standards and register with the authority to protect individuals privacy rights while promoting confidence in the country’s growing digital economy.
Business owners should review their data handling practices now to determine if they meet the 10 000 individual threshold. Those affected should participate in ongoing consultations to voice concerns about the fee structure. Preparing compliance systems early will reduce disruption when registration opens. The kuthandiza spirit of mutual support in Malawi’s business community means sharing information about these requirements helps everyone adapt. Firms that invest in proper data governance today will build stronger customer trust and position themselves for chuma growth opportunities in the digital marketplace.
What are your thoughts on this business development? Share your insights and remember to follow us on Facebook and Twitter for the latest Malawi business news and opportunities. Visit us daily for comprehensive coverage of Malawi’s business landscape.
- Rising Data Costs Threaten Malawi’s Business Growth and Investment Stability - July 14, 2026
- Treasury eases borrowing rules for local businesses – The Times Group - July 14, 2026
- User Safety: safe - July 14, 2026