Malawi

Prescribes risk and governance requirements for banks and bank holding companies: shareholder, board and director duties (paras 4-17) and board committees, internal audit and an independent risk function (paras 18-20). Amended by GN 31 of 2024, effective 24 May 2024. It has no provisions on outsourcing, information technology or incident reporting.

Establishes MACRA, sets its functions (s. 6) and makes consumer protection an express objective (s. 2(h)). Bars licensees from disclosing subscriber information except under a written law or High Court order (s. 54) and requires SIM card registration (s. 92). Section 104 had not commenced in the version read; the date shown is for most other provisions (GN 24 of 2017).

Gives legal recognition to electronic writing, signatures, contracts and records (Part III), establishes the Malawi Computer Emergency Response Team as a unit under MACRA (s. 6), creates computer-related offences such as unauthorised access and interference with data (s. 84) and sets data processing principles and data subject rights (ss. 71-74). The page shows no commencement provision; a commencement notice is listed on MalawiLII.

Sets minimum standards of employment. Requires a valid reason connected with capacity, conduct or operational requirements for dismissal (s. 57(1)), says filing a complaint or taking part in proceedings against an employer is not a valid reason (s. 57(3)(g)), and gives labour officers entry and inspection powers (s. 9). Commencement date taken from MalawiLII; the ministry's copy leaves it to a Gazette notice. Section 1 of the ministry's copy cites the Act as the 'Employment Act, 1999'.