As the deadline for the full enforcement of the Personal Data Protection and Privacy Law on October 15, 2023 approaches, private businesses and public institutions are actively working to ensure compliance with the requirements for the lawful processing of personal data.

Leading the way in compliance efforts is the Bank of Kigali (BK) and its subsidiaries – BK Capital, BK Techouse, and BK Insurance – which have formally met all the requirements of a Data Controller.

Across the globe, data protection and privacy have become essential components for businesses and institutions, requiring adherence to global best practices while complying with national laws and regulations.

For the Bank of Kigali Group, safeguarding clients' data and maintaining their privacy are of utmost importance in building and preserving trust.

At a recent Handover Ceremony, BK's CEO, Dr. Diane Karusisi, highlighted the significance of achieving this compliance milestone. She emphasized the institution's commitment to protecting client data and pledged to continue investing in robust data protection measures to remain at the forefront in an ever-evolving digital landscape.

In line with the law's requirements, the Bank of Kigali has established a comprehensive framework of technical and organizational safeguards to secure client information, prevent unauthorized access, and mitigate potential data breaches. These measures not only meet legal obligations but also ensure the highest standards of privacy and confidentiality for customers.

During the handover ceremony, Col. David Kanamugire, CEO of The National Cybersecurity Authority (NCSA), the supervisory organ for the Data Protection Office responsible for implementing the Personal Data Protection and Privacy Law, commended BK's proactive approach towards compliance. He stressed the importance of data protection in today's digital era.

By embracing the law's provisions and proactively implementing the necessary safeguards, The Bank of Kigali has achieved an essential milestone, setting a benchmark for other businesses to follow suit. Compliance with the Personal Data Protection and Privacy Law signifies an organization's dedication to safeguarding the interests and privacy of its clients.

As the 15th of October draws near, other businesses and institutions are diligently working to meet the deadline. With data breaches and privacy concerns becoming more prevalent, compliance with this law is a critical step towards fostering trust, protecting personal information, and upholding the principles of data privacy, which are essential for providing social and economic services.