Rwanda: Signed Law No. 058/2021 relating to the protection of personal data and privacy including cybersecurity regulation

On 13 October 2021, Law No. 058/2021, relating to the protection of personal data and privacy, was signed. The law applies to data controllers, processors, and third parties involved in automated and manual data processing. Data controllers and processors must adopt appropriate technical measures to protect personal data from loss, damage, or destruction. They must identify risks, establish safeguards, regularly verify their effectiveness, and update them as needed. The supervisory authority may inspect and assess these measures if there is a risk of rights or privacy infringements.