Rwanda’s law on the protection of personal data and privacy (DPP Law)

DPP Law Table of contents

Art. 14

Source of personal data

The data controller or the data processor requests personal data directly from the data subject.

However, a person can collect personal data from another person, another source or a public institution if:

  1. the personal data is open to the public;
  2. the data subject has deliberately made the personal data public;
  3. the data subject has consented to the collection of personal data from another source;
  4. the collection of the personal data from another source complies with the provisions of this Law.