Rwanda: Rwanda Utilities Regulatory Authority's Regulations No. 001/R/TD-ICS/RURA/016 Governing Telecom Network Security in Rwanda including data localisation requirement entered into force

On 3 December 2016, Regulations No. 001/R/TD-ICS/RURA/016 Governing Telecom Network Security in Rwanda entered into force. Existing licensees were required to comply with these regulations within six months of the signing date (i.e., by 2 December 2016). These regulations include provisions on data localisation, requiring that subscriber information, such as voice, SMS, and call data records, must be processed, stored, and transmitted securely within the Republic of Rwanda. Article 16 explicitly prohibits the transfer, storage, or processing of subscriber information outside the country.