Detailed overview
Rwanda does not currently have a single AI Act equivalent to the EU AI Act. Its AI framework is based on national AI policy, data governance, digital-transformation strategy, personal-data protection and sector-specific regulation.
National AI Policy
Rwanda has adopted a National Artificial Intelligence Policy. The policy is intended to support Rwanda's position as a technology and AI hub and to guide responsible AI development, adoption and governance.
The policy focuses on pillars such as skills development, infrastructure, governance and collaboration. It aims to create an adaptive AI ecosystem that supports innovation while addressing risks and responsible use.
Existing-law overlays
Rwanda's AI policy is a national strategy and governance framework, not a comprehensive AI statute with a single penalty table. AI projects involving personal data may be subject to Rwanda's data-protection framework. AI used in finance, healthcare, education, public services, telecommunications, consumer services or employment may also fall under sector-specific rules.
Penalties
There is no single Rwanda AI-specific penalty table. Penalties depend on the applicable underlying law, including data protection, cybersecurity, financial regulation, healthcare regulation, telecommunications regulation, consumer protection or criminal law.
Practical requirements & details
Sourced from the National AI Policy, Law N° 058/2021 on the Protection of Personal Data and Privacy, NCSA AI-related cybersecurity advisories, and Rwanda Utilities Regulatory Authority (RURA) digital rules.
National AI Policy — pillars
- Skills development; infrastructure; governance; collaboration.
- Aims at adaptive AI ecosystem supporting innovation while addressing risk.
Personal Data Protection Law
- Lawful basis, transparency, purpose limitation, security, breach notification.
- Cross-border transfers require authorisation by the National Cyber Security Authority.
- Fines up to RWF 5,000,000 plus administrative measures; criminal liability for serious breaches.
Sector overlays
- National Bank of Rwanda on AI in financial services.
- Ministry of Health and Rwanda FDA on AI medical devices.
- Consumer Protection Law for AI-driven misleading practices.