Rwanda’s law on the protection of personal data and privacy (DPP Law)

DPP Law Table of contents

Art. 36

Register of data controllers and data processors

The supervisory authority puts in place a register of data controllers and data processors. Such a register is kept and managed by the supervisory authority, which also determines its form and the manner in which it is used.

The supervisory authority may, at the request of the data controller or the data processor who has an outdated entry in the register of data controllers and data processors, erase the entry from the register

The supervisory authority puts in place a regulation determining modalities under which persons with justified reasons may have the right of access to the register of data controllers and data processors for consultation, or to be issued with a certified copy or an extract of any entry in such a register.