Rwanda’s law on the protection of personal data and privacy (DPP Law)

DPP Law Table of contents

Art. 13

Processing of personal data which does not require data subject’s identification

If the purposes for which the data controller or the data processor processes personal data do not or no longer require the identification of the data subject, the data controller or the data processor is not obliged to maintain, acquire or process additional information in order to identify the data subject for the sole purpose of complying with this Law.

In case the data controller or the data processor is unable to identify the data subject because of the alteration of his or her personal data, the data controller informs the data subject in writing or electronically, if necessary

However, the data subject, with respect to his or her rights, provides additional information enabling his or her identification.