On Thursday, June 25, 2026, the Data Protection & Privacy Office (DPO) conducted an awareness session with the Senior Management Team of BK Insurance on Rwanda’s Data Protection & Privacy Law (DPP Law).
The discussions emphasized compliance obligations and highlighted frequent audit findings in the insurance sector, including excessive access rights, weak password controls, poor vendor oversight, outdated policies, lack of training and improper handling of sensitive data.
The team was reminded that accountability for personal data rests with everyone, from leadership to staff and cannot be outsourced. Even unintentional mistakes can be costly when it comes to protecting privacy.
