🇲🇼 Malawi Data Privacy Laws

The framework

The operative statute in Malawi is the Data Protection Act 2024, enforced by the Malawi Communications Regulatory Authority.

For media planning that means an opt-in posture, with consent capture built before campaigns launch.

Key instruments

Marketing and advertising

Consent-first, GDPR-influenced framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.

Cross-border transfers

Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.

Enforcement and penalties

The law provides for fines and criminal penalties. How often the authority actually enforces sets the real price.