Rwanda: Implemented Law No. 058/2021 relating to the protection of personal data and privacy, including cybersecurity regulation

On 15 October 2021, Law No. 058/2021 relating to the protection of personal data and privacy, entered into force. The law applies to data controllers, processors, and third parties involved in automated and manual data processing. Data controllers and processors must adopt appropriate technical measures to protect personal data from loss, damage, or destruction. They must identify risks, establish safeguards, regularly verify their effectiveness, and update them as needed. The supervisory authority may inspect and assess these measures if there is a risk of rights or privacy infringements.