Organizations have only one year to comply with the provisions of the Law Nº 058/2021 of 13/10/2021 relating to the protection of personal data and privacy. Some requirements that organizations should be aware of as they get prepared for full compliance by the end of the Transitional Period are the obligation to register with the supervisory authority as a data controller or data processor; the obligation to designate a representative in Rwanda for data controllers; and the obligation to designate a personal data protection officer. What else is required for compliance?
