Article 48- Item 1 of the Data Protection Law highlights that to be able to share and transfer personal data outside Rwanda, an authorisation from the supervisory authority must be obtained by the data controller or processor after providing proof of appropriate safeguards with respect to the protection of the personal data.