Get Ready For Compliance With Rwanda's Data Protection Law: Why Organisations Should Start Now

Two months from now, organisations will have only one year remaining to comply with the provisions of the Law Nº 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (the "Data Protection Law") following its entry into force on 15 of October 2021.

Some requirements that organisations should be aware of as they get prepared for full compliance by the end of the Transitional Period are:

• the obligation to register with the supervisory authority as a data controller or data processor for organisations that intend to be data controllers or data processors and who are established and reside in Rwanda;
• the obligation to designate a representative in Rwanda for data controllers or the data processors who are neither established nor reside in Rwanda, but process personal data of data subjects located in Rwanda; and