Rwanda’s Corporate Governance Rules Are Now Binding: What Boards Need to Know

Rwanda has introduced significant changes to its corporate governance framework following the publication of Capital Market Authority (CMA) Regulations No. 002/CMA/2026 on 2 October 2026.

The regulations, which took effect immediately without a transition period, replace the 2012 Capital Market Corporate Governance Code with legally binding minimum standards.

The changes introduce more stringent requirements for board composition, independence, accountability, risk management, internal audit, shareholder protection and sustainability disclosures.

For boards of directors, audit committees and executive management, the message is clear: corporate governance compliance now requires immediate attention.

What Has Changed?

The new regulations contain 52 articles across 10 chapters and introduce several important requirements:

• Board composition and independence: Boards must generally comprise 7–11 directors, with at least half being non-executive and at least one-third independent. Different board-size requirements apply to SMEs.

• Independent leadership: The Board Chair must be independent, and the roles of Chair and CEO must remain separate.

• Board committees: Nominating, Remuneration and Audit Committees are required, with defined responsibilities and publicly disclosed terms of reference.

• Risk management and internal audit: Boards must oversee risk management frameworks, while listed companies are required to maintain an independent internal audit function.

• Greater transparency: Companies must strengthen shareholder communications, conflict-of-interest policies, governance disclosures and whistleblowing mechanisms.

• Sustainability reporting: Annual reports must include environmental and social risk disclosures, with independent assurance of non-financial information.

Who Is Affected?

The regulations apply to listed companies and issuers of securities to the public. They also reference prospective issuers, public companies, state-owned enterprises, private companies and SMEs.

However, clarification from the CMA may be required regarding the extent to which certain provisions apply to private companies and SMEs.

Parent and holding companies must also consider governance arrangements across their subsidiaries.

What Should Boards Do Now?

With the regulations already in force, affected organisations should prioritise a comprehensive governance gap assessment, review board composition and independence, evaluate committee structures, update governance policies and strengthen internal audit and risk management arrangements.

Companies should also review their annual reporting processes to address the new governance, remuneration and sustainability disclosure requirements.

Where compliance gaps exist, boards must disclose the areas of non-compliance alongside corrective actions and implementation timelines.

Expert Insights from BDO Rwanda

In our latest regulatory alert, Egide Clément Niyitegeka Kabano, Partner – Risk Advisory Services at BDO East Africa Rwanda, provides a detailed analysis of the new requirements, practical implications for organisations and priority actions for boards and management teams.

The publication also examines provisions that may require further regulatory clarification.

Download the full regulatory alert to understand the changes and assess your organisation's governance readiness.

How BDO Can Help

BDO East Africa Rwanda's Risk Advisory Services team supports organisations through corporate governance assessments, board effectiveness evaluations, governance policy development, internal audit advisory, enterprise risk management, sustainability reporting readiness and director training.

For further guidance, contact our Rwanda team at rwanda@bdo-ea.com.