Despite a decade of investment in digital reforms and public sector ICT systems, Malawi government institutions continue to rely heavily on commercial email services such as Gmail and Yahoo Mail for official communication.
This raises concerns among cybersecurity experts and digital governance advocates about data security, national digital sovereignty, and stalled e-government transformation.
Government officials across ministries, departments, and agencies still conduct official business using personal or generic email addresses ending in ‘@ gmail.com’ and ‘@yahoo.com.’
The practice persists despite Malawi having the capacity to establish centralised government domains such as gov. mw, a standard digital infrastructure used globally to protect official government communication.
- Advertisement -
Chief Secretary to the Government, Justin Saidi, has directed all Ministries, Departments, and Agencies (MDAs) to route all ICT procurement through the Department of E-Government and to stop using Google and Yahoo email domains within six months.
- Advertisement -
Saidi said government business must be conducted using official government email systems to protect public data and ensure institutional continuity.
“When officers use personal emails, government data leaves with them. Government information must remain with the government,” he said.
Principal Secretary for E-Government Prosper Mopiwa admitted that Malawi has lagged behind in implementing secure digital communication systems but said reforms are now underway.
He said more than 9,000 government offices— including hospitals and schools—are currently being connected to the internet under the “boma” government network.
- Advertisement -
However, ICT experts say policy reforms alone will not solve the problem without full implementation across institutions.
Andrew Kamwendo, general manager of the ICT Association of Malawi (Ictam), said continued reliance on commercial email platforms reflects broader challenges in implementing ICT policies.
“In some cases institutions may not yet have fully functional official email infrastructure. In others, officers simply find commercial platforms easier to use because they are familiar,” Kamwendo said.
He added that limitations in centralized ICT infrastructure, maintenance, and technical support sometimes push officers to rely on commercial platforms for convenience.
However, he warned that using commercial email services for official government communication exposes sensitive public information to several risks.
Sensitive government data may be stored on external servers outside Malawi’s jurisdiction, raising concerns about digital sovereignty and confidentiality.
The practice also weakens cybersecurity oversight, data governance, and institutional accountability.
Cybersecurity expert Letasi Lackson said such practices increase risks of phishing attacks, data breaches, and identity spoofing because the accounts are not protected under centralized government cybersecurity monitoring systems.
“Once communication moves through private email systems, it becomes extremely difficult for the government to monitor threats or track digital records,” Lackson said.
Media analyst Victor Kaonga said reliance on personal email accounts also weakens institutional accountability.
“Email is the foundation of digital governance. If government communication happens on private platforms, it undermines both data security and official record management,” he said.
Malawi began promoting e-government reforms more than a decade ago as part of efforts to modernize public administration.
Several digital initiatives were introduced, including electronic financial systems, tax administration platforms, and online public service portals.
However, while infrastructure projects were launched, the backbone of digital governance—secure official communication infrastructure—remains fragmented.
Instead of using standardized government email domains, many civil servants continue to communicate through personal accounts hosted by global technology companies.
Cybersecurity specialists warn that foreign-hosted email services present serious national security risks.
Commercial platforms typically store data in international data centers, meaning official government correspondence may be stored outside Malawi’s legal jurisdiction.
This raises concerns about confidentiality when official communication related to procurement, finance, or policy development is transmitted through private systems.
Experts say centralized government domains would allow authorities to enforce stronger cybersecurity protections and maintain control over official communication.
While Gmail and similar services appear free, reliance on them can also create hidden operational costs.
Some civil servants reportedly pay individually for additional cloud storage or advanced services needed to manage official documentation.
ICT analysts argue that maintaining a unified government email infrastructure could ultimately reduce costs while improving digital security.
Malawi already has the institutional capacity to operate official government digital domains.
The national internet domain “.mw” is managed by the Malawi Communications Regulatory Authority, which oversees internet governance and telecommunications regulation.
Through this framework, the government could operate official communication systems under domains such as boma.gov.mw.
Executive Director of the Malawi Communications Regulatory Authority, Maya Nkoloma, said the regulator is ready to work with relevant government institutions to support the development and adoption of secure government digital infrastructure.
Gift Kadzamira, Director General of the National Commission for Science and Technology, said protection of government data must also be treated as a national research and development priority.
She said NCST will work with the Department of E-Government, regulators, and local ICT firms to support locally hosted government domains, build technical capacity, and develop standards that protect Malawian data while enabling homegrown digital innovation.
“Digital infrastructure is national infrastructure—we must host it here and build the skills to run it,” she said.
