The Protection Against Unfair Competition Act provides a comprehensive framework for the effective protection of trade secrets (Arts. 8-9). In addition, Art. 13 (g) of the Telecommunications Act mandates that records of trade secrets not be made available to the public for inspection.

Sections 49 and 50 of the Telecommunications Act mandate the sharing of passive infrastructure in Saint Lucia.

It is reported that Saint Lucia mandates functional and accounting separation for operators with significant market power (SMP) in the telecom market.

The licensing regime in the telecom sector is regulated by the Telecommunications (Private Networking Licensing) Regulations and the Telecommunications (Licensing and authorisation) Regulations.
According to Art. 14 of the Telecommunications (Licensing and Authorisation) Regulations, when it is proposed to limit the number of licenses for the operation of a certain type of telecommunications network or the provision of a certain type of telecommunications service, the Commission, upon the recommendation of Eastern Caribbean Telecommunications Authority (ECTEL), shall publish a consultative document containing the reasons for the proposed limitation.
According to Arts. 4 and 5 of the Telecommunications (Fees) Regulations, individual and class licenses are subject to a non-refundable application fee, a one-time initial fee (upon approval of the application), and an annual license fee expressed either as a percentage of the licensee's gross revenue or a fixed amount; for fixed-line, mobile, and Internet service providers, these fees are XCD 1,000 (USD 370), XCD 20,000 (USD 7,400), and 3% of annual gross revenue, respectively.

It is reported that the de minimis threshold, that is the minimum value of goods below which customs do not charge duties, is USD 100, below the 200 USD threshold recommended by the International Chamber of Commerce (ICC).

According to Art. 29 of Law No. 058/2021 of 13/10/2021 Relating to the Protection of Personal Data and Privacy, any person intending to act as a data controller or data processor must register with the National Cyber Security Authority (NCSA). As specified in Section 3.4 of the Guide on Data Controller & Data Processor Registration, data controllers and data processors are required to submit the following documents for registration:
- Memorandum of Understanding (MoU) or agreement with a local representative (if the controller/processor is neither established nor resident in Rwanda but processes data of individuals located in Rwanda, as established in Art. 39 of the No. 058/2021);
- Application letter addressed to the Chief Executive Officer of NCSA;
- Application form;
- Operating certificate or licence of the company (e.g. Rwanda Development Board certificate, Rwanda Utilities Regulatory Authority licence, Rwanda Central Bank licence, etc.);
- Copy of a valid National Identification Card or passport of the data protection officer;
- Hosting invoice, receipt, or agreement;
- Company or institution profile.
The supervisory authority must issue a registration certificate to any applicant who meets the requirements within 30 working days from the date of receipt of the application. The validity period of the registration certificate will correspond to the validity of the submitted operating licence.

Law No. 36/2012 on Competition and Consumer Protection provides a comprehensive consumer protection framework that applies to online transactions. The law is in place to promote fair competition, provide consumers access to products and services at competitive prices and better quality, and create an environment that is conducive to investment.

Rwanda has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Rwanda has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Rwanda has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

Under Art. 210 of the Law Governing Information Communication and Technologies, all licensed electronic communications service providers in Rwanda are required to register the complete personal details of subscribers or SIM card holders using their networks or services. The Regulatory Authority oversees the registration process by issuing related regulations and ensuring compliance.
Moreover, according to Art. 4 of Regulation No. 18/R/SM-ICT/RURA/2024, all licensees operating in Rwanda must register all SIM card holders using their network services. As specified in Art. 7, for national citizens, the information required for the registry includes: full names, date of birth, identity card number, a clear scanned copy of the passport or national identity card, nationality, registered telephone number, sex, and biometric data.
In addition, as established in Art. 8, the registration process for foreigners without a resident permit (or visitors) must include the following: the travel document used for entry into the country, fingerprint verification, and biometric data, which must match the travel document information. This process must be conducted manually and in the physical presence of the applicant.

According to Art. 53 of Law No. 24/2016 of 18/06/2016 Governing Information Communication and Technologies, the Rwandan government holds the authority to suspend telecommunications services indefinitely—either in general or in relation to specific communications—when deemed necessary to preserve national integrity. In practice, this has translated into reported cases of online blocking targeting independent media platforms and news websites. Among the affected outlets are 15 online radio stations and websites, including The Rwandan, Rugali, and Le Prophète. Since 2019, reciprocal restrictions with Uganda have resulted in the continued blocking of several Ugandan news sources by the Rwanda Utilities Regulatory Authority (RURA), including Daily Monitor, The Observer, and The Independent. While most international news platforms remain accessible, the website of Agence France-Presse exhibited signs of disruption in 2024.

According to Art. 2 of the Regulation Governing Cybersecurity, there is a licensing scheme for all ICT infrastructure and services, which include data, systems, equipment, networks and applications.

The Regulations Governing the Licensing of Multimedia Services impose licensing requirements for online newspapers, internet radio services, internet TV services, video-on-demand (VoD) services, IPTV, mobile TV services, and other related multimedia services.