Rwanda’s law on the protection of personal data and privacy (DPP Law)

DPP Law Table of contents

Art. 56

Accessing, collecting, using, offering, sharing, transfer or disclosing of personal data in a way that is contrary to this Law

A person who accesses, collects, uses, offers, shares, transfers or discloses personal data in a way that is contrary to this Law, commits an offence.

Upon conviction, he or she is liable to an imprisonment of not less than one (1) year but not more than three (3) years and a fine of not less than seven million Rwandan francs (RWF 7,000,000) but not more than ten million Rwandan francs (RWF 10,000,000) or one of these penalties.