Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
Section 52(4) of the Electronic Transactions and Cyber Security Act, 2016 provides that, subject to any regulations made the Act, it is lawful for any person to use encryption programme or product provided that it has lawfully come into possession of that person. A copy of the law can be found here .
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
Section 54(1) of the Electronic Transactions and Cyber Security Act, 2016 prohibits the provision of cryptography services or products without registration. Applications must be made to the Malawi Communications Regulatory Authority (s.54(2)). The government must issue regulations (a) in respect of use, importation and exportation of encryption programmes and encryption products; and (b) prohibiting the exportation of encryption programmes or other encryption products from Malawi generally or subject to such restrictions as may be prescribed (s.54(3)). Section 67(1) further requires a person who provides encryption services to declare to the Malawi Communications Regulatory Authority “the technical characteristics of the encryption means as well as the source code of the software used”. The government must issue regulations defining the conditions for such declarations and “may define encryption services whose technical characteristics or conditions of supply are such that, with regard to national defence or internal security interests, their provision shall not require any prior formality” (s. 67(2)). Violation of either of these provisions is a criminal offence punishable by up to seven years’ imprisonment and a fine of MWK 5,000,000. A copy of the law can be found here .
Import/export controls
Section 54(1) of the Electronic Transactions and Cyber Security Act, 2016 prohibits the provision of cryptography services or products without registration. Applications must be made to the Malawi Communications Regulatory Authority (s.54(2)). The government must issue regulations (a) in respect of use, importation and exportation of encryption programmes and encryption products; and (b) prohibiting the exportation of encryption programmes or other encryption products from Malawi generally or subject to such restrictions as may be prescribed. A copy of the law can be found here .
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
No known legislation or policies.
Obligations on providers to assist authorities
No known legislation or policies.
Assessment Text Area
In Malawi, cryptography services or products must be registered and as such, the use, importation and exportation of encryption programmes and encryption products is subject to authorisation by the government. Violation of these regulations is a criminal offence punishable by up by imprisonment and a fine.
Murphy's Law