Rwanda: Adopted DPO guidance on personal data inventory and readiness checklist tools

On 4 May 2023, the Data Protection and Privacy Office (DPO) issued guidance on personal data inventory and readiness checklist tools under Law N. 058/2021 of 13 October 2021. The guidance provides tools to support organisations in meeting legal requirements for personal data protection, including mapping personal data categories, establishing lawful processing bases, setting retention periods, and ensuring compliance with data protection standards. It outlines obligations related to data subject rights, cross-border data transfers, and data protection impact assessments, as well as technical and organisational measures required for compliance.