Duty LXD-6812
Handles health records, in Rwanda
Law relating to the Protection of Personal Data and Privacy, sensitive personal data and children's datasince 5 lines
Law N° 58/2021, arts. 9-12 (sensitive personal data, children's data and criminal records) · Read the law's page
- Process sensitive personal data, including genetic or biometric information, race, health status, criminal records, religious or philosophical beliefs, political opinion, sexual life or family details, only on one of the five grounds article 10 lists, such as the data subject's consent, a vital interest, public health, or archiving, scientific or statistical purposes.
- When processing sensitive personal data, build the capacity of staff involved, control who can access it, and apply technical and organisational measures appropriate to the risk, including storing it separately and applying tokenisation, pseudonymisation or encryption where appropriate.
- Comply with the retention periods this Law sets for sensitive personal data.
- Before processing personal data you know belongs to a child under sixteen, obtain the consent of a holder of parental responsibility over the child, unless the processing is necessary to protect the child's vital interest.
- Process personal data of a convict only under the supervisory authority's supervision, and put in place safeguards to respect that data subject's rights and freedoms.