Article 48- Item 1 of the Data Protection Law highlights the condition for sharing and transfer of personal data outside Rwanda is if a data controller or processor has obtained authorisation from the supervisory authority after providing proof of appropriate safeguards such as Consent of data subject as in Article 6.