Rwanda: National Cyber Security Authority published guidance on children's data processing

On 28 April 2022, the National Cyber Security Authority (NCSA) published guidance on children's data processing. The Data Protection and Privacy Law No. 058/2021 recognises that children may not fully understand the risks of sharing personal data and it includes additional safeguards. Article 9 specifies that processing a child's personal data under the age of 16 requires consent from a parent or guardian, and this consent must be in the child's best interest. However, consent is not needed if processing the data is vital for the child's well-being.