
Rwanda’s telecommunications regulator has formally sanctioned GVA Rwanda Ltd, the operator behind fibre internet service Canalbox, after the company failed to address persistent service failures that left thousands of subscribers without reliable connectivity for weeks.
The Rwanda Utilities Regulatory Authority moved against Canalbox following a series of customer complaints, with the action coming after a prior enforcement notice had already been issued to the company.
The regulator has now ordered GVA Rwanda to compensate all customers affected between 13 and 20 April 2026, pay daily financial penalties until it achieves full compliance, and submit progress reports within prescribed timelines.
The sanction is grounded in Article 269 of Law No. 24/2016, Rwanda’s principal legislation governing information and communication technologies.
Under Article 269, the law provides for daily fines against operators who continue to fall short of compliance, a mechanism Rwanda has applied before, including against MTN Rwanda, which was previously fined Rwf 15 million per day for non-compliance.
Persistent non-compliance can also trigger additional licence conditions, suspension, or revocation. For a company the size of GVA Rwanda, the accumulating daily penalties are designed to make continued inaction more costly than fixing the problem.
The outages were not simply a matter of local infrastructure failing. An anonymous Canalbox employee told local media that the company was dealing with a fibre issue originating from its international provider overseas, a fault on external fibre that its technicians were working to repair.
That upstream dependency is an important detail. It explains why the outages persisted despite customer complaints stretching over weeks, and it points to a structural vulnerability in how Canalbox delivers its service in Rwanda.
Canalbox is a fibre-optic internet service operated by Groupe Vivendi Africa, offering unlimited broadband in Rwanda and Uganda. The service launched in Kigali in March 2020 and has built a reputation for fast speeds in urban areas, though it has now faced similar complaints across both markets.
The scale of customer frustration was striking. Rwandans took to social media in large numbers to document the failures, with some reporting up to two months without functional service and dozens of calls to the company’s support lines going nowhere.
RURA’s intervention reflects a regulatory posture that has grown noticeably firmer in recent years. Rwanda has made reliable digital connectivity a pillar of its economic development model, the country’s smart city ambitions, its growing base of tech-enabled businesses, and its BPO sector all depend on infrastructure that works.
The regulatory action is part of RURA’s stated mandate to ensure reliable service delivery in a context of growing digital demand, with households increasingly relying on high-speed internet for e-learning, remote work, and streaming, while businesses depend on stable connectivity to maintain cloud services and service continuity.
GVA Rwanda has publicly committed to achieving compliance, and RURA has said it will continue monitoring progress closely. But the regulator’s language was pointed: failure to comply will result in further regulatory action.
That is not a warning delivered lightly. Rwanda’s ICT law gives RURA considerable teeth and the regulator has shown, through past sanctions against larger operators like MTN, that it will use them. The more significant question now is whether GVA Rwanda can resolve the upstream fibre dependency that caused this crisis in the first place, or whether a temporary patch will leave the same vulnerability in place for the next outage.
For Rwanda’s broader digital agenda, the episode is a useful test of regulatory credibility. Consumer protection in the telecoms space is often the weakest link in African markets, where operators can absorb fines more easily than they fix networks.
RURA’s decision to mandate customer compensation, not just penalties signals an expectation that accountability should reach the subscriber, not just the regulator’s accounts.




