Is a listed company, in Rwanda

Law N° 58/2021, arts. 27-28 and 53-65 (supervisory authority, penalties, offences and compensation) · Read the law's page

• Comply with the supervisory authority's oversight, including its inspections, its register of data controllers and processors, and any regulation it issues to implement this Law.
• Expect an administrative fine of RWF 2,000,000 to 5,000,000, or one percent of your preceding year's global turnover, for misconducts including failing to register, log processing, maintain records, designate a data protection officer, or notify, report or communicate a breach; a corporate body or legal entity is fined one percent of global turnover alone.
• Expect criminal liability, on conviction, for unlawfully accessing, using, sharing, transferring or disclosing personal data, re-identifying de-identified data, destroying or altering data, selling data, unlawfully collecting or processing sensitive personal data, or providing false registration information, each carrying its own imprisonment and fine range, with a fine of five percent of turnover where a corporate body or legal entity is convicted.
• Expect a data subject who suffers serious damage from your violation of this Law to have the right to claim compensation before a competent court, unless you prove you were not responsible for the damage.
• Expect the supervisory authority to be the organ that settles conflicts arising under this Law in the first instance, subject to your right to take an unresolved conflict, or a disputed administrative sanction, to a competent court.