Health Record Rights Index · country brief · this country's data as of October 1, 2026

Who holds the health record in Malawi?

In 2026, Malawi scores 40 out of 100 for how much say a person has over their own health record. It is tied for 97th of 198 countries and territories, and could rank anywhere from 71st to 120th allowing for scoring error, in the Weak band (25 to 44). Who holds the keys: doctors, hospitals and insurers. Source: Health Record Rights Index, SuperTruth, this country's data as of October 1, 2026.

Doctors, hospitals and insurers decide. Its strongest right, compared with the typical country, is getting your full record (50 out of 100, against 40 to 45 for the typical country). The furthest behind is rules for AI in your care (25 out of 100, against 30 for the typical country).

Malawi's 2024 data law gives a 30-day right to a copy, but most patients still carry their record in a paper health passport.

Published · updated · this country's data as of October 1, 2026 · research tool, not legal advice

overall score · Weak band, 25 to 44
40/100
rank among 198 countries and territories; likely 71st to 120th, allowing for scoring error
Tied for 97th
confidence in our evidence
High
strength of our evidence (DTI™)
89/100 (Gold)

Questions people ask

Can I see my health record in Malawi?

In 2026, getting your full record scores 50 out of 100 in Malawi; the typical country scores 40 to 45. Section 19 of the Data Protection Act 2024 gives a right to a copy of your data in electronic form within 30 days, free where practicable. There is no patient portal, and most people hold their own record in a paper health passport. Source: Malawi Data Protection Authority, February 2, 2024, and the other sources below.

Who controls health records in Malawi?

In 2026, doctors, hospitals and insurers hold the keys to your health record in Malawi. Control over who sees it scores 30 out of 100 in Malawi; the typical country scores 30. Health data may be processed without consent for public health or the public interest, and the new shared record gives no sharing choice or access log. HIV status is the exception: providers need written consent to disclose it beyond the treating team, with narrow exceptions. Source: Malawi Data Protection Authority, February 2, 2024, and the other sources below.

How does Malawi compare?

In 2026, Malawi scores 40 out of 100, against 39 for the typical country. This brief compares it with Botswana (39 out of 100), Mauritius (41 out of 100) and Tanzania (41 out of 100). Source: the ranking of all 198 countries and territories.

Eight rights, compared with Botswana, Mauritius, Tanzania and the typical country

Scores out of 100, by right
Getting your full record20%5045 · 50 · 35
Control over who sees it20%3030 · 32 · 30
Privacy and security15%5058 · 55 · 48
One record across your care15%4028 · 30 · 48
Protection from sale and ads10%4248 · 45 · 45
Doctors see it when treating you10%3022 · 30 · 40
Your say over research use5%4949 · 49 · 46
Rules for AI in your care5%2540 · 28 · 58

Black dot: Malawi. Hollow dots: Botswana, Mauritius, Tanzania (scores out of 100 on the right, same order). Gray line: the typical country of all 198. Overall: Malawi 40 out of 100. Scores move in steps of about 5 points, so read a rank with its likely range.

What would Malawi need to change to score higher?

Malawi sits in Weak (25 to 44); Mixed starts at 45. Its two weakest rights, compared with the typical country and weighted by how much each counts, are protection from sale and ads (42 out of 100, against 45 for the typical country) and doctors see it when treating you (30 out of 100, against 33 to 34 for the typical country). Our scoring rules give more points for:

  • Protection from sale and ads: Clear limits on selling health data or using it for ads, covering apps and data brokers as well as doctors and hospitals.
  • Doctors see it when treating you: Doctors who treat you able to see your full record from other providers, with your consent and emergency rules in place.

Which laws give health record rights in Malawi?

  • Data Protection Act, 2024 (Act No. 3 of 2024): Health is sensitive data; 30-day right to a copy; 72-hour breach notice; MACRA is the regulator.
  • HIV and AIDS (Prevention and Management) Act, 2018 (Act No. 9 of 2018): HIV status confidential; disclosure needs written consent except treating providers, anonymous studies, court orders.
  • Pharmacy and Medicines Regulatory Authority Act, 2019 (Act No. 9 of 2019): Creates the regulator for medicines and medical devices; no AI or software rules found.

Doctors, waits and private care context, not part of the score

Doctors per 10,000
0.8 2024
Nurses and midwives per 10,000
5.8 2024
Private insurance + out-of-pocket
21.2% 2023
Record reaches private care?
unknown

Real cases

  • March 9, 2026 · Malawi24 Health minister ends group consultations that made patients share health details with strangers

Compare Malawi

Cite this brief

In 2026, Malawi scored 40 out of 100 for how much say a person has over their own health record, tied for 97th of 198 countries and territories (could be 71st to 120th), in the Weak band. Who holds the keys: doctors, hospitals and insurers. Source: Health Record Rights Index, SuperTruth, this country's data as of October 1, 2026, https://healthrecordrights.com/brief/malawi/

The 15 sources for Malawi

Each source appears once, under the first right it supports. Titles are shown as our research agents recorded them, usually in the page's own language; text in square brackets is our machine translation. Links were checked on the date shown.

Getting your full record (3 sources)

  1. “Data Protection Act, 2024 (Act No. 3 of 2024)”

    Malawi Data Protection Authority (law or regulation) · Title in English

    Dated February 2, 2024 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record; Control over who sees it; Privacy and security; Protection from sale and ads; Your say over research use; Rules for AI in your care

    https://www.dpa.mw/download/data-protection-act-2024/

  2. “Malawi Data Protection Authority (home page, complaints service)”

    dpa.mw (regulator) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.dpa.mw/

  3. “Digital health records system in pilot phase”

    The Nation (news) · Title in English

    Dated September 4, 2026 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record; One record across your care; Doctors see it when treating you

    https://mwnation.com/digital-health-records-system-in-pilot-phase/

Control over who sees it (3 sources)

  1. “HIV and AIDS (Prevention and Management) Act, 2018 (Act No. 9 of 2018)”

    policyvault.africa (law or regulation) · Title in English

    Dated February 9, 2018 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Privacy and security; Doctors see it when treating you; Your say over research use

    https://policyvault.africa/wp-content/uploads/policy/MWI12.pdf

  2. “U.S. and Malawi Sign Five-Year Health MOU”

    U.S. Embassy Lilongwe (government guidance) · Title in English

    Dated January 16, 2026 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it

    https://mw.usembassy.gov/u-s-and-malawi-sign-five-year-health-mou/

  3. “Malawi barters Malawians health data for US to lift visa restrictions?”

    Malawi24 (news) · Title in English

    Dated January 16, 2026 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it

    https://malawi24.com/2026/01/16/is-malawi-trading-health-data-for-visa-relief-with-the-us/

Privacy and security (2 sources)

  1. “Malawi Builds Capacity to Implement Data Protection Act”

    Malawi Data Protection Authority (regulator) · Title in English

    Dated September 22, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://www.dpa.mw/malawi-builds-capacity-to-implement-data-protection-act/

  2. “Design of a Trustworthy Cloud-Native National Digital Health Information Infrastructure for Secure Data Management and Use”

    Oxford Open Digital Health, PMC (other) · Title in English

    Dated November 3, 2024 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security; Doctors see it when treating you

    https://pmc.ncbi.nlm.nih.gov/articles/PMC11932406/

One record across your care (3 sources)

  1. “Health Information Systems in Malawi”

    Elizabeth Glaser Pediatric AIDS Foundation (other) · Title in English

    Dated August 2024 · Link checked October 2, 2026 (opened)

    Used for: One record across your care; Doctors see it when treating you

    https://pedaids.org/resource/health-information-systems-malawi/

  2. “MALAWI Health Data Ecosystem Mapping”

    PATH, Digital Innovation in Pandemic Control (other) · Title in English

    Dated October 2023 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://media.path.org/documents/MALAWIREPORTecosystemmapping-.pdf

  3. “Malawi strengthens alignment under the health data collaborative”

    WHO Regional Office for Africa (international body) · Title in English

    Dated May 22, 2026 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.afro.who.int/countries/malawi/news/malawi-strengthens-alignment-under-health-data-collaborative

Your say over research use (1 source)

  1. “DS-I Africa Law: Cross-Border Sharing of Data, Malawi country guide”

    datalaw.africa (other) · Title in English

    Dated July 2024 · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://www.datalaw.africa/wp-content/uploads/2024/09/Malawi_country-guide_30-Sept.pdf

Rules for AI in your care (3 sources)

  1. “Guidelines”

    Pharmacy and Medicines Regulatory Authority (regulator) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.pmra.mw/guidelines/

  2. “The PMRA Act, 2019”

    Pharmacy and Medicines Regulatory Authority (government guidance) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.pmra.mw/the-act/

  3. “Malawi drafts AI bill to govern public sector tech”

    ITWeb Africa (news) · Title in English

    Dated August 6, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://itweb.africa/article/malawi-drafts-ai-bill-to-govern-public-sector-tech/PmxVE7KEOnpqQY85

Something wrong on this page? Tell us.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

SuperTruth Inc. · 24 S. 24th St., Philadelphia, PA 19103, USA · +1 215 918 4140 · supertruth.ai
Something wrong? Tell us · Questions or a briefing: supertruth.ai/on-the-record#contact · Full index: healthrecordrights.com
OECD: Organisation for Economic Co-operation and Development (38 mostly high-income countries). DTI™: the Data Trust Index, which grades the evidence behind each score. SuperTruth makes it and publishes this index. Everything here comes from public information: laws, government and regulator pages, court decisions, published news, WHO, OECD and World Bank data. Full sources: https://healthrecordrights.com/brief/malawi/#sources. SuperTruth built this index and sells health data verification products; no one paid to be included. Research tool, not legal advice. Our scores and our own words are CC BY 4.0; quoted law and source titles stay with their owners.