Rwanda: National Cyber Security Authority issued guidance on principles for processing personal data

On 20 April 2022, the National Cyber Security Authority (NCSA) published guidance on principles for processing personal data. The guidance outlines that data protection law No. 058/2021, applies to all entities handling Rwandan citizens' personal data. The law sets six principles for data processing, lawfulness and transparency, purpose limitation, relevance, accuracy, limited retention, and respect for data subjects' rights. These principles aim to protect privacy while enabling secure data flows, with penalties for non-compliance.