Rwanda’s personal data protection and privacy law

Are you an organization located in Rwanda responsible for controlling or processing personal data of individuals?

If so, you must comply with Rwanda’s recently enacted law on personal data protection and privacy or face penalties such as fines. The National Cyber Security Authority (NCSA) is in charge of implementing the law and has established the Data Protection Office (DPO) to coordinate compliance. To become compliant, register as either a data controller or data processor with the NCSA, and submit the required documentation. The NCSA will issue a registration certificate to compliant organizations within 30 working days. For tailored advice, the NCSA is available to answer all your questions. Start the road to compliance today by registering with the NCSA.

Download the PDF to get more information.

Personal Data Protection and Privacy Law Guideline