Image for article type news
News

Rwanda: Data protection law published in the Official Gazette

October 18, 2021
Summary

Rwanda's Law No. 058/2021, published in the Official Gazette on 15 October 2021, sets out principles and obligations for personal data protection and privacy, including lawfulness, fairness, transparency, and accuracy. It mandates record-keeping, appointing a data protection officer, impact assessments, breach notifications, and implementing security measures. The law also enumerates data subject rights such as consent, access, portability, and erasure, and prescribes administrative fines for non-compliance ranging from RWF 2,000,000 to RWF 5,000,000 or 1% of the global turnover. A transition period of up to two years is provided for existing data controllers and processors to comply with the new regulations.

Law No. 058/2021 of 13 October 2021 Relating to the Protection of Personal Data and Privacy was published, on 15 October 2021, in the Rwanda Official Gazette ('the Law'). In particular, the Law establishes among others, the following principles: lawfulness, fairness and transparency, purpose limitation and accuracy. In addition, the Law establishes among others, the following obligations: maintaining records of processed persona data, designation of a personal data protection officer, carrying out personal data protection impact assessments, provision of information during personal data collection, notification of personal data breach and communication of it to data subjects, and the impleme

News

Gain access to unlimited articles with 7 day access to all features, no credit card required.

or

Other options:

Jurisdictions: