Rwanda DPP Law
In force Rwanda · In force Oct 15, 2021 · no upcoming deadlines
Deadlines
| Date | What happens | When |
|---|---|---|
| Oct 15, 20232 years ago | Two-year transition ends | 2.9 years ago |
| Oct 15, 20214 years ago | Law published and in force | 4.9 years ago |
Summaries for reference, not legal advice. Check the official text.
What it does
Rwanda's data protection law, modelled on the GDPR. Controllers and processors must register with the supervisory authority, report breaches within 72 hours, and store personal data in Rwanda unless they hold a certificate allowing storage abroad. Cross-border transfers need authorisation or another listed ground.
- Who it applies to
- Controllers, processors and third parties established or resident in Rwanda, and those outside Rwanda that process data of people in Rwanda.
- Penalties
- Administrative fines of RWF 2 million to 5 million or 1% of global turnover for the prior year; legal entities face 1% of global turnover. Criminal offences under Arts. 56 and after carry prison terms and fines.
- Enforced by
- National Cyber Security Authority (NCSA), through its Data Protection and Privacy Office
- Official name
- Law No. 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy
- Citation
- Law No. 058/2021 of 13/10/2021
- Topics
- privacy, data-residency, breach-notification
Research notes
Dates and article numbers were checked in the official gazette PDF from the Ministry of Justice; RwandaLII has a searchable copy of the same text.
Related
Questions about Rwanda DPP Law
- What are the Rwanda DPP Law compliance deadlines?
- Oct 15, 2021: Law published and in force. Oct 15, 2023: Two-year transition ends.
- When does Rwanda DPP Law take effect?
- Rwanda DPP Law took effect on Oct 15, 2021.
- Who does Rwanda DPP Law apply to?
- Controllers, processors and third parties established or resident in Rwanda, and those outside Rwanda that process data of people in Rwanda.
- What are the penalties under Rwanda DPP Law?
- Administrative fines of RWF 2 million to 5 million or 1% of global turnover for the prior year; legal entities face 1% of global turnover. Criminal offences under Arts. 56 and after carry prison terms and fines.