Rwanda’s law on the protection of personal data and privacy (DPP Law)

DPP Law Table of contents

Art. 22

Right to restriction of processing of personal data

The data subject or the supervisory authority has the right to restrict the data controller from processing personal data for a given period if:

  1. the accuracy of personal data is contested by the data subject, pending the verification of their accuracy;
  2. the processing is unlawful and the data subject requests the erasure of the personal data or the restriction of the use of some of them;
  3. the data subject has objected to the processing of personal data pending the verification whether the legitimate grounds of the controller override those of the data subject.

The right to restriction of processing of personal data described in Paragraph One of this Article is not exercised if the processing of personal data:

  1. is necessary for the protection of the rights of another person;
  2. is necessary for reasons of public interest.

The data controller must, before lifting the restriction of processing of personal data referred to in item 1o of Paragraph 2 of this Article, inform the data subject in writing or electronically.