Rwanda: Signed Law No. 058/2021 relating to the protection of personal data and privacy including registration requirement

On 13 October 2021, Law No. 058/2021, relating to the protection of personal data and privacy, was signed. The law mandates that data controllers and data processors engaged in processing personal data must register with the National Data Protection Authority. This requirement applies to entities operating in Rwanda or handling data of individuals located in Rwanda. The law outlines specific criteria for registration, including submission of organisational details, processing activities, and measures to ensure compliance with data protection principles. Once registered, data controllers and processors must obtain a certificate and update the authority on changes affecting their registration status.