Registration of critical information infrastructure 19. – (1) An owner of critical information infrastructure shall register with the Authority. (2) An owner of critical information infrastructure operating in Malawi prior to the commencement of this Act shall, within six months from the commencement of this Act, register with the Authority. (3) When registering critical information infrastructure under subsection (1), the owner shall provide the following information – (a) his name or the name of the person who is in control of the critical information infrastructure; (b) the nature and type of the critical information infrastructure; (c) the use or function of the critical information infrastructure; and (d) any other information that the Authority may deem necessary. (4) Any change in the legal ownership of a registered critical information infrastructure shall be subject to the approval of the Authority. (5) An owner of a registered critical information infrastructure who contravenes subsection (2) is liable to pay to the Authority the administrative penalty specified in the Schedule. Withdrawal of designation of critical information infrastructure 20. – (1) The Minister may, on the advice of the Authority, withdraw the designation of a critical information infrastructure at any time if the Minister considers that the computer system or computer network no longer satisfies the criteria of a critical information infrastructure. (2) Where the Minister withdraws a designation of critical information infrastructure under subsection (1), the Minister shall publish the withdrawal in the Gazette. Duty of owner of critical information infrastructure 21. - (1) An owner of critical information infrastructure shall – 19