ZenoXCare — marketing
Loading country compliance overlay…
RW·East African Community (EAC)
Rwanda compliance overlay
Rwanda enforces Law No. 058/2021 on Protection of Personal Data and Privacy. ZenoXCare aligns to this overlay alongside the pan-African baselines listed below.
At a glance
- ISO codes
- RW · RWA
- Regional bloc
- EAC
- Rollout wave
- Wave 2 — Extension
- Data protection status
- Enacted · Enforced
- Health data classified as sensitive
- Yes
- National statute
- Law No. 058/2021 on Protection of Personal Data and Privacy
Regulator
National Cyber Security Authority (data protection office)
https://cyber.gov.rw/ ↗Strong digital health programme; NCSA enforcement.
Applicable baselines & overlays
By virtue of Rwanda's African Union membership and East African Community (EAC) affiliation — plus any national statute in force — the following standards form the compliance stack ZenoXCare operates under here.
Cross-border data transfers
Where Rwanda's regime permits processing in non-adequate countries, ZenoXCare relies on contract-based safeguards (Standard-Contractual-Clauses-equivalent), with a per-recipient transfer assessment filed with the national data-protection authority. The full record of processing activities is summarised on the standards & compliance overview; partners and regulators can request the per-country evidence pack from our compliance team.
Frequently asked
- Does ZenoXCare comply with the data protection law in Rwanda?
- Rwanda enforces Law No. 058/2021 on Protection of Personal Data and Privacy (an enacted and actively enforced data-protection statute). ZenoXCare aligns to this overlay alongside the pan-African baselines applicable via EAC membership and the African Union.
- Who is the data protection regulator in Rwanda?
- National Cyber Security Authority (data protection office) — https://cyber.gov.rw/. ZenoXCare's compliance team engages with the regulator on filings, breach notifications, and cross-border transfer assessments where applicable.
- What rollout wave does Rwanda sit in for ZenoXCare?
- Rwanda is in rollout wave "wave 2 extension". ZenoXCare delivers service into a market only after the wave-specific gating in the African jurisdictions registry is cleared. A canonical overview for this wave lives at /standards-and-compliance/africa/waves/wave-2-extension.
- Is health data classified as sensitive personal data in Rwanda?
- Yes — health data is treated as sensitive personal data under the Rwanda regime. ZenoXCare applies the strictest applicable safeguards (encryption in transit + at rest, RBAC + tenant isolation, audit-log immutability, breach-notification procedure) on every PHI processing surface.