Data protection law in Rwanda: registration and research permits
What a survey team needs to know about personal data and survey authorization in Rwanda.
Summary for planning; confirm requirements with the regulator before fieldwork.
not classified in source QA
This country is not placed in any of the three data protection groups in the source QA, so no status is shown.
Data protection law
Law 058/2021 of 8 October 2021 on personal data protection and privacy (2021)
Registration
registration of data controllers and processors with NCSA required
National statistics office
Note
Law 058/2021 replaced Law 024/2016; NCSA administers registration.
Rwanda research rules: common questions
Is there a data protection law in Rwanda?
Law 058/2021 of 8 October 2021 on personal data protection and privacy (2021). This country is not placed in any of the three data protection groups in the source QA, so no status is shown.
Who regulates personal data in Rwanda?
NCSA (National Cyber Security Authority), data protection and privacy unit.
Do I need to register to collect personal data in Rwanda?
Registration of data controllers and processors with NCSA required.
Do I need a permit to run a survey in Rwanda?
NISR authorization required under Law 45/2013 on statistics.
Sources: the regulator and statistics office pages linked above, retrieved 10 Oct 2026. See our methods.