Legal and regulatory alert

A man reading a legal alert on his phone.
  • Publication
  • September 28, 2026

Welcome to our legal insights hub on Rwanda’s legal and regulatory landscape, where we provide expert perspectives, in-depth analysis, and practical commentary on the developments shaping the country’s future.

As Rwanda continues to evolve, businesses and institutions must navigate an increasingly complex environment driven by regulatory reform, policy shifts, and growing cross-border considerations. Our publications aim to unpack these changes offering clear, actionable insights to help organisations stay informed, compliant, and ahead of emerging trends.

In this issue: 

Consent, legitimate interest, and the line between them

Rwanda’s Law N° 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy was enacted to protect you, your photos, your videos, your personal information from exactly this kind of thing. The law is overseen by the NCSA—Data Protection Office of Rwanda, the national authority responsible for enforcing your data protection rights. And as Kigali positions itself as a hub for world-class concerts, conferences, and international events, those rights matter more than ever.

This alert is your guide. Let’s walk through what “consent” really means told through the stories of people who could be your neighbours.

Did you know? Under Rwandan law, unlawful processing of sensitive personal data such as religious beliefs captured on a church livestream can carry up to ten years’ imprisonment and fines of RWF 25,000,000. Even for ordinary personal data, corporate bodies face fines of up to 5% of annual turnover. And these rules are already being enforced across East Africa.

Follow us