Rwanda: National Cyber Security Authority guide on personal data protection and privacy

On 20 January 2022, the National Cyber Security Authority (NCSA) published a guide on personal data protection and privacy. According to the guide, the law applies to entities within and outside Rwanda that process the personal data of individuals in Rwanda. It defines data processing, requires data controllers to register, and provides a compliance period until 15 October 2023. The law distinguishes between personal and sensitive personal data, emphasises privacy, and includes special provisions for children under 16.