Rwanda’s law on the protection of personal data and privacy (DPP Law)

DPP Law Table of contents

Art. 2

Scope of this Law

This Law applies to:

  1. the processing of personal data by electronic or other means using personal data through an automated or non-automated platform;
  2. the data controller, the data processor or a third party who
    1. is established or resides in Rwanda and processes personal data while in Rwanda;
    2. is neither established nor resides in Rwanda, but processes personal data of data subjects located in Rwanda.