Rwanda charts a new course for government data sharing

In an increasingly data-driven world, governments are grappling with how to harness the power of information for the public good while safeguarding individual rights. Rwanda recently approved aNational Data Sharing Policy, taking a step forward in the privacy domain.

This policy crucially arrives as countries increasingly recognize data as a strategic national asset. It is a logical and vital progression for Rwanda, a country lauded for its ambitious digital transformation agenda. The National Data Sharing Policy between Government Agencies directly supports the country's overarching development blueprints, including the Second National Strategy for Transformation — particularly its goal of strengthening the capacity and service delivery of public institutions — and the long-term Vision 2050, a national development plan that aims to create "accountable and capable state institutions" and an improved economy.

The policy aims to dismantle data silos, foster a culture of collaboration among government agencies and,ultimately, improve the delivery of citizen-centric services — all critical for achieving national aspirations.

Supported by seven annexes that outline its operational aspects, from governance structures to technology platforms, the policy aims to transform how government entities share and use data and position Rwanda among African countries actively formalizing such comprehensive approaches.

Kenya, for instance, also has a Data Sharing Code. Nigeria, Senegal and South Africa have also developed national data strategies or policies which often include ambitions for enhanced inter-governmental data sharing to improve public services and governance.

These implementations collectively signify a growing momentum across Africa to formalize and improve intergovernmental data sharing for national advancement.

What is the National Data Sharing Policy?

The National Data Sharing Policy is designed to create a protected and well-governed environment for data exchange among government agencies. Its primary goal is to enhance decision-making, facilitate interagency collaboration and provide a robust foundation for fulfilling national policy objectives and advancing digital transformation for Rwandans' benefit.

The policy aims to responsibly enable data sharing. It operates in concert with existing legal frameworks, most notably Rwanda's Data Protection and Privacy Law and the Access to Information Law. Together, this legislation ensures that while data flows more freely to generate insights, data protection and freedom of information principles remain paramount.

Although they are related, it is important to distinguish this initiative from open data policies. While open data initiatives typically focus on making government data publicly available, Rwanda's Data Sharing Policy specifically governs the exchange of data, including potentially sensitive information, among government agencies or departments.

However, the underlying objectives of transparency and accountability resonate with broader movements, such as the Open Government Partnership, by aiming to make government operations more efficient and responsive through better data use. The policy document itself acknowledges that all government data, whether internal or public, is subject to the same stringent governance and compliance requirements.

What does the National Data Sharing Policy mean in practice?

The policy is built upon four guiding principles: regulatory compliance; protection, governance and oversight; secure, modern technological enablement; and adherence to data standards and quality. These principles are operationalized through several key components and institutional arrangements.

Backed by a dedicated budget, the policy outlines a phased implementation plan extending from 2025 to 2029. Key milestones in 2025 include the crucial establishment of the data governance unit and its technical subcommittee, the definition of data standards essential for interoperability and the formal commencement of the data sharing platform project.

Over subsequent years, the focus will be on the DSP's iterative development and enhancement, including an online portal for entity registration and data discovery, the rollout of robust monitoring and reporting mechanisms, and providing continuous technical assistance and education to participating government entities. A fundamental requirement throughout this period is for all government bodies to institute strong internal data governance, robust cybersecurity measures, and comprehensive privacy programs compliant with the DPPL.

The Ministry of Information Communications Technology and Innovation will provide overarching policy guidance and oversight. The Data Governance Unit will be responsible for supervising data sharing activities, including approval of data sharing requests and ensuring compliance with agreed-upon protocols.

While direct enforcement penalties are not heavily detailed in the policy, the Data Governance Unit's oversight, mandatory use of the DSP for all inter-governmental data sharing, and adherence to formal data sharing agreements will serve as primary mechanisms for ensuring compliance.

The policy formalizes data sharing processes through mechanisms, such as data sharing application forms and legally binding data sharing agreements between participating institutions. This structured approach ensures clarity on the purpose, scope and conditions of data sharing. Furthermore, the policy champions the adoption of risk management frameworks, like the "Five Safes" framework, an internationally recognized model for managing disclosure risk.

What is the impact?

The successful implementation of Rwanda's National Data Sharing Policy promises far-reaching impacts. Enhanced evidence-based policymaking is a primary anticipated benefit that will allow the government to design more effective programs and respond adeptly to national challenges.

Improved efficiency in public service delivery, reduced duplication of efforts and cost reduction are also expected as data becomes more accessible and interoperable across agencies. This directly contributes to the NST2's goal of transforming Rwanda into a knowledge-based economy.

For citizens, this translates into more responsive and tailored services that align with Vision 2050's emphasis on improving quality of life. For instance, by combining anonymized health data with education statistics, Rwanda's government could identify areas needing targeted interventions. By overlaying transportation data with demographic information, urban planning could be significantly optimized. Similarly, the ability for different public health facilities to securely share anonymized data on infectious disease occurrences could significantly enhance national disease surveillance systems, allowing for quicker identification of potential epidemics and more coordinated responses to protect public health.

With the policy serving as a driverfor innovation, new insights and solutions to complex development challenges can emerge. The National Data Sharing Policy aligns with Rwanda's ambition to be an innovation hub in Africa by facilitating government collaboration on data projects.

Moreover, by proactively establishing clear guidelines for data sharing within the bounds of data protection law, the policy aims to build trust between government agencies and the public.

While the journey will involve overcoming challenges such as ensuring consistent implementation across all government entities, building requisite technical capacity and fostering a sustained culture of data stewardship, the policy's phased implementation plan over the next four years and dedicated budget indicate a strong governmental commitment in Rwanda.

Ridwan Oloyede, CIPP/E, CIPM, FIP, is the AI governance and technology policy lead at Tech Hive Advisory Africa and the director at the Center for Law and Innovation.