Th e Malawi Gazette Supplement, dated 4th November, 2016 ...

1 Malawi GOVERNMENT(Published 4th November, 2016)ACTNo. 33 of 2016I assentPRO. ARTHURPETERMUTHARIKAPRESIDENT20th October, 2016 ARRANGEMENT OF SECTIONSSECTIONPARTI__PRELIMINARYPROVISI ONS1. Short title and commencement2. Interpretation3. Objective of the Act4. Principles5. Implementation of this ActPARTII__ADMINISTRATION6. Establishment of the Malawi CERT PARTIII__FORMATIONANDVALIDITYOFELECTRONI CTRANSACTIONS7. Recognition of electronic writing8. Electronic signature9. Equal treatment of digital signatures10. Conduct of a person relying on a digital signature11.

2 Bearing legal consequences of relying on electronic signature12. Recognition of digital signature certificates and digital signatures13. Notarization, acknowledgement and certification14. Other requirements15. Determination of originality of an electronic message16. Admissibility and evidential weight of electronic messages17. Storage of electronic messages18. Secure electronic record19. Validity of a contract executed in electronic formThe Malawi Gazette Supplement, dated 4th November, 2016, containingActs(No. 6C)SECTION20.

3 Time and place of dispatch and receipt of an electronic message21. Offer and acceptance22. Attribution of electronic messages to sender23. Acknowledgement of receipt of an electronic messagePARTIV__LIABILITYOFONLINEINTERMED IARIESANDCONTENTEDITORSANDPROTECTIONOFON LINEUSERS24. Freedom of communication and its limitations25. Liability of an intermediary service provider26. Liability for being a conduit27. Liability for caching services28. Liability for the supply of hosting services29. Saving of data30. Takedown notification31. Online content editors32.

4 Right to replyPARTV__ELECTRONICCOMMERCE33. Information to be provided by supplier34. Formation of electronic contracts with consumers35. Cooling off period36. Performance of an electronic transaction37. Default in contract performance38. Review and cancellation of contract by a consumer39. Cancellation of payment40. Prohibition of misleading advertising41. Identification of advertisement content42. Unsolicited communication43. Scope of application of financial provisions44. Identity of a provider of financial or banking services45.

5 Right of withdrawal from a contractPARTVI__SECURITYANDDIGITALECONOM Y46. Use, supply, transfer, Presumptions regarding digital signature certificates48. Unreliable digital signatures49. Reliance on digital signature and certificate50. Requirements to publish digital signature certificate2 Electronic Transactions No. 33 SECTION51. The Authority to appoint a certification authority52. Encryption53 Trustworthy system54. Disclosure55. Issuing a digital signature certificate56. Representations upon issuance of a digital ignature certificate57.

6 Suspension of a digital signature certificate58. Revocation of a digital signature certificate59. Revocation without a subscriber's consent60. Notice of suspension of digital signature certificate61. Notification of revocation of a digital signature certificate62. Generating a key pair63. Accurate and complete representations64. Acceptance of a digital signature certificate65. Control of a private key66. Requesting for suspension or revocation67. Provision of encryption services68. Administrative sanctions69. Appointment of cyber inspectors70.

7 Powers and functions of a cyber inspectorPARTVII__DATAPROTECTIONANDPRIVA CY71. Processing of personal data72. Rights of a data subject73. Accuracy and completeness of information74. Security obligationsPARTVIII__DOMAINNAMEANDMANAGE MENT75. Appointment of the Registrar of domain names76. Functions of the Registrar77. Recommendations relating to domain names78. Offence of administering domain name without authority79. Dispute resolution concerning domain namesPARTIX__ELECTRONIC-GOVERNMENTTRANSA CTIONS80. Requirement of electronic filing and issuing of documents81.

8 Specific guidelines to public bodies82. Implementation of e-governmentNo. 33 Electronic Transactions 3 SECTIONPARTX__OFFENCES83. Search warrant84. Unauthorized access, interception or interference with data85. Child pornography86. Prohibition of cyber harassment87. Prohibition of offensive communication88. Prohibition of cyber stalking89. Prohibition of hacking, cracking and introduction of viruses90. Unlawfully disabling a computer system91. Prohibition of spamming92. Prohibition of illegal trade and commerce93. Attempting, aiding and abetting crimes94.

9 Offences committed by legal persons95. General offence and penaltyPARTXI__GENERALPROVISIONS96. Lodging of complaints to the Authority97. Public education programmes98. Intermediary services providers' levy99. Codes of to prevail in case of inconsistency orders104 Transitional provisionAn Act to make provision for electronic transactions; for theestablishment and functions of the Malawi ComputerEmergency Response Team (MCERT); to make provision forcriminalizing offences related to computer systems and information communication technologies; and provide forinvestigation, collection and use of electronic evidence.

10 And formatters connected therewith and incidental by the Parliament of Malawi as follows__4 Electronic Transactions No. Act may be cited as the Electronic Transactions andCyber Security Act, 2016, and shall come into operation on suchdate as the Minister may appoint, by notice published in the this Act, unless the context otherwise requires__ Authority means the Malawi Communications RegulatoryAuthority established under section 3 of the CommunicationsAct; CCTLD means the Country Code Top Level Domain whichis at the top level of the internet domain name, system assignedaccording to the two letter codes in the international standardsISO3166 1 by ICANN; certification authority means a trusted third party organization or company licensed or authorized by the Authorityto issue digital certificates used to create digital signatures andpublic-private key pairs.