BACK
You might need some help ?
REACH US OUT
LAST NAME
NAME
EMAIL
MESSAGE

I confirm that I have read and accept the General Terms and Conditions of Use and the Data Protection Policy.

SUBMIT YOUR DEMAND

LEGAL BASES

ENFRSW

Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy in Rwanda is a legal text which aims to regulate the collection, processing and protection of personal data.

  1. Right to privacy: The law recognizes and guarantees the right to privacy, in accordance with Article 23 of the Constitution of Rwanda.

  2. Protection of personal data: The law establishes principles for the protection of personal data, including the lawfulness and fairness of processing, the limitation of collection to specific and legitimate purposes, the quality of data, the limitation of storage, and so on.

  3. Legal bases for data processing: The law specifies the legal bases on which the processing of personal data may be based, such as the consent of the data holder, the performance of a contract, compliance with a legal obligation, protection of vital interests, public interest, legitimate interest, etc.

  4. Data holders' rights: Individuals have rights, including the right to withdraw consent, the right to access their data, the right to rectification, the right to erasure, the right to object to processing, the right to data portability, and the right not to be subject to an automated decision.

  5. Responsibilities of data controllers and processors: Entities that collect and process personal data (data controllers) have specific responsibilities under the law. These include appointing a data protection officer, keeping processing records, notifying data breaches, etc.

  6. National Cybersecurity Authority (NCSA): The law confers powers on the National Cybersecurity Authority to supervise implementation of the law, issue registration certificates, respond to legitimate requests for opinion, impose administrative sanctions, etc.

  7. Sanctions: Administrative sanctions are provided for in the event of non-compliance with the law, including fines and penalties as a percentage of the company's annual sales.

These points provide an overview of Law N° 058/2021 on the protection of personal data and privacy in Rwanda. It is recommended to consult the full text of the law for a thorough and precise understanding of its provisions.