Rwanda: National Cyber Security Authority adopted guide on data controller and data processor registration

On 21 March 2022, the National Cyber Security Authority (NCSA) adopted the guide on data controller and data processor registration. The guide the mandatory registration process for entities handling personal data, including those providing services such as payroll or customer management. These organisations are required to submit documents, ensure proper contracts are in place when acting as processors, and comply with data protection measures. Non-compliance, such as failure to register, can lead to administrative fines and other penalties.