Rwanda: Cybersecurity requirement for virtual asset service providers in Law No. 023/2026 regulating virtual asset business
Progress
Scope
Timeline of events
Law No. 023/2026 regulating virtual asset business including cybersecurity requirement for virtual asset service providers entered into force
On 28 May 2026, Law No. 023/2026 regulating the virtual asset business entered into force on the date of its publication in the Official Gazette. The Law requires a virtual asset service provider to put in place systems, processes, controls, policie…
President signed Bill regulating the virtual asset business into law including cybersecurity requirement for virtual asset service providers
On 25 May 2026, the President signed the Bill regulating the virtual asset business into law. The Law requires a virtual asset service provider to put in place systems, processes, controls, policies and procedures to manage cybersecurity risks to it…
Chamber of Deputies adopted draft law regulating the virtual asset business including cybersecurity requirement for virtual asset service providers
On 5 May 2026, the Chamber of Deputies adopted, in plenary session, the draft law regulating the virtual asset business. The draft law would require a virtual asset service provider to put in place systems, processes, controls, policies and procedur…
Draft law regulating the virtual asset business including cybersecurity requirement for virtual asset service providers was introduced to Chamber of Deputies
On 31 March 2026, the draft law regulating the virtual asset business was introduced to the Chamber of Deputies. The draft law would require a virtual asset service provider to put in place systems, processes, controls, policies and procedures to ma…
Cabinet approved draft law regulating the virtual asset business including cybersecurity requirement for virtual asset service providers
On 4 March 2026, the Cabinet approved the draft law regulating the virtual asset business. The draft law would require a virtual asset service provider to put in place systems, processes, controls, policies and procedures to manage cybersecurity ris…