Understanding the New Passenger Information Law in Rwanda: Key Highlights from the Official Gazette of March 8, 2024
The Rwanda Official Gazette published a special edition on March 8, 2024, introducing Law No. 006/2024, which governs the collection, processing, and protection of advance passenger information (API) and passenger name record (PNR) data. This legislation marks a significant step in enhancing Rwanda’s border security, facilitating efficient travel procedures, and aligning with international standards for data management related to passenger movements.
Context and Purpose of the Law
The law aims to regulate the collection and handling of passenger data before entry or departure from Rwanda. It establishes a legal framework to ensure that relevant authorities can access necessary information to improve security, border management, and compliance with international travel protocols. The law also emphasizes the protection of passenger data, ensuring privacy rights are respected while enabling the government to utilize the information for security and administrative purposes.
Who Is Affected by the Law?
This legislation directly impacts airlines, travel agencies, and other entities involved in international passenger transport to and from Rwanda. These entities are responsible for providing the required passenger data to authorities before travelers arrive or depart. Furthermore, passengers themselves are indirectly affected, as their personal information will be processed and protected under specific legal provisions. The law applies to all individuals traveling through Rwanda’s borders, whether for tourism, business, or other reasons.
Key Provisions and Data Collection Procedures
The law stipulates that airlines and relevant entities must gather and transmit specific passenger data elements, which include:
- Full name and date of birth
- Nationality and passport details
- Travel itinerary and flight details
- Other identifiers as specified by law
This information must be submitted in advance of travel, ensuring that authorities can perform security checks and risk assessments. The law also delineates responsibilities for data processing, emphasizing that the data must be collected securely and transmitted through approved channels, primarily via digital systems aligned with Rwanda’s e-government platforms.
Data Processing, Sharing, and Protection
Once collected, passenger data undergoes analysis by designated government agencies to assess security risks. The law permits sharing of evaluated data with other government bodies and, under specific conditions, with international partners or other countries. Such sharing is governed by strict conditions to safeguard privacy and prevent misuse.
To protect passenger data, the law mandates measures such as data anonymization, secure storage, and controlled access. It also establishes retention periods for the data, after which information must be securely destroyed unless legally required to be retained longer. The legislation emphasizes that data subjects—passengers—have rights concerning their personal information, including access, correction, and the right to request data deletion.
Legal and Institutional Framework
The implementation of this law is overseen by authorities such as the Rwanda Civil Aviation Authority (RCAA), responsible for coordinating data collection and compliance. The law aligns with Rwanda’s broader digital government initiatives, notably through the Rwanda Information Society Authority (RISA), which facilitates the digital transmission and management of passenger data.
Furthermore, the law incorporates provisions for the assessment and sharing of data, ensuring that information is only used for legitimate purposes such as security checks, border control, and international cooperation. It also stipulates the confidentiality and security measures necessary to prevent unauthorized access or breaches.
Implications for Travelers and Stakeholders
Travelers should be aware that their personal information will be collected and processed in accordance with this law. It is advisable to ensure that all travel documents are accurate and up-to-date to facilitate smooth data submission by airlines. Stakeholders in the aviation and travel sectors must familiarize themselves with their obligations to transmit passenger information promptly and securely.
Overall, Rwanda’s new legislation on advance passenger information underscores the country’s commitment to strengthening border security, enhancing travel efficiency, and safeguarding personal data in line with international standards. Citizens and travelers alike can expect a more streamlined, secure, and privacy-conscious approach to border management in Rwanda.
