It is reported that foreign companies may be subject to local content or other localisation requirement (e.g., partnership with a local partner firm or joining a consortium). Also, companies have expressed concerns about corruption and lack of transparency in procurement processes.

Nigeria mandates that government entities must engage in competitive bidding for procurements exceeding NGN 2.5 million (approximately USD 5,747). For contracts above this threshold but below NGN 100 million (approximately USD 229,885) for goods and NGN 1 billion (approximately USD 2.3 million) for services and works, only Nigerian-owned companies are eligible to bid. For procurements exceeding these amounts, both Nigerian and foreign-owned companies are allowed to participate in the competitive bidding process. However, it's important to note that this specific bidding requirement is not explicitly stated in regulatory texts.

Nigeria is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA), nor does it have observer status.

In 1995, the Nigerian Investment Promotion Commission Act opened all sectors to foreign participation. It allows for full foreign ownership of firms in all but the petroleum sector, where investment is limited to existing joint ventures or new production-sharing agreements.

Nigeria is not a signatory of the 1996 World Trade Organization (WTO) Information Technology Agreement (ITA) nor the 2015 expansion (ITA II).

It is reported that the de minimis threshold, that is the minimum value of goods below which customs do not charge duties, is USD 100, below the 200 USD threshold recommended by the International Chamber of Commerce (ICC).

According to Art. 29 of Law No. 058/2021 of 13/10/2021 Relating to the Protection of Personal Data and Privacy, any person intending to act as a data controller or data processor must register with the National Cyber Security Authority (NCSA). As specified in Section 3.4 of the Guide on Data Controller & Data Processor Registration, data controllers and data processors are required to submit the following documents for registration:
- Memorandum of Understanding (MoU) or agreement with a local representative (if the controller/processor is neither established nor resident in Rwanda but processes data of individuals located in Rwanda, as established in Art. 39 of the No. 058/2021);
- Application letter addressed to the Chief Executive Officer of NCSA;
- Application form;
- Operating certificate or licence of the company (e.g. Rwanda Development Board certificate, Rwanda Utilities Regulatory Authority licence, Rwanda Central Bank licence, etc.);
- Copy of a valid National Identification Card or passport of the data protection officer;
- Hosting invoice, receipt, or agreement;
- Company or institution profile.
The supervisory authority must issue a registration certificate to any applicant who meets the requirements within 30 working days from the date of receipt of the application. The validity period of the registration certificate will correspond to the validity of the submitted operating licence.

Law No. 36/2012 on Competition and Consumer Protection provides a comprehensive consumer protection framework that applies to online transactions. The law is in place to promote fair competition, provide consumers access to products and services at competitive prices and better quality, and create an environment that is conducive to investment.

Rwanda has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Rwanda has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Rwanda has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

According to Art. 53 of Law No. 24/2016 of 18/06/2016 Governing Information Communication and Technologies, the Rwandan government holds the authority to suspend telecommunications services indefinitely—either in general or in relation to specific communications—when deemed necessary to preserve national integrity. In practice, this has translated into reported cases of online blocking targeting independent media platforms and news websites. Among the affected outlets are 15 online radio stations and websites, including The Rwandan, Rugali, and Le Prophète. Since 2019, reciprocal restrictions with Uganda have resulted in the continued blocking of several Ugandan news sources by the Rwanda Utilities Regulatory Authority (RURA), including Daily Monitor, The Observer, and The Independent. While most international news platforms remain accessible, the website of Agence France-Presse exhibited signs of disruption in 2024.

According to Art. 2 of the Regulation Governing Cybersecurity, there is a licensing scheme for all ICT infrastructure and services, which include data, systems, equipment, networks and applications.