Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
No known legislation or policies.
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
No known legislation or policies.
Import/export controls
No known legislation or policies.
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
Article 8 of Law No 60/2018 of 22/8/2018 on Prevention and Punishment of Cyber Crimes provides that all persons have an obligation to collaborate with organs in charge of the investigation of cyber crimes. This includes compliance with any lawful directions, including disclosing access codes to a computer system, or all data required for the purposes of the investigation. Article 11 further provides that if the disclosure of data is required for the purposes of an investigation or prosecution of an offence, the prosecution authority may issue an order to a person in possession of such data compelling them to disclose the data. If this data is stored in a computer or computer system, the request is considered to require that person to produce or give access to that data in a form in which it can be taken away and in which it is visible and legible. While encryption is not explicitly mentioned within the law, these broad procedural powers could be interpreted as requiring persons (whether natural or legal) to facilitate or provide access to encrypted data. A copy of Law No 60/2018 of 22/8/2018 on Prevention and Punishment of Cyber Crimes can be found here .
Obligations on providers to assist authorities
Article 8 of Law No 60/2018 of 22/8/2018 on Prevention and Punishment of Cyber Crimes provides that all persons have an obligation to collaborate with organs in charge of the investigation of cyber crimes. This includes compliance with any lawful directions, including disclosing access codes to a computer system, or all data required for the purposes of the investigation. Article 11 further provides that if the disclosure of data is required for the purposes of an investigation or prosecution of an offence, the prosecution authority may issue an order to a person in possession of such data compelling them to disclose the data. If this data is stored in a computer or computer system, the request is considered to require that person to produce or give access to that data in a form in which it can be taken away and in which it is visible and legible. While encryption is not explicitly mentioned within the law, these broad procedural powers could be interpreted as requiring persons (whether legal or natural) to facilitate or provide access to encrypted data. A copy of Law No 60/2018 of 22/8/2018 on Prevention and Punishment of Cyber Crimes can be found here .
Assessment Text Area
There is no legislation guaranteeing the general right to encryption in Rwanda. Per Rwandan law, all persons are required to comply with requests for data when requested for the purposes of investigating a cyber crime. The law requires that this data be “in a form in which it can be taken away and in which it is visible and legible”. While encryption is not explicitly mentioned within the law, these broad procedural powers could be interpreted as requiring persons (whether legal or natural) to facilitate or provide access to encrypted data.
Murphy's Law