Bahamas Data Protection Act 2003
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | BS DPA |
| Region | Americas |
| Country or scope | Bahamas |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance โบ Manage. |
How Safeguard covers BS DPA
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
BS-DPA-SEC Appropriate Security Measures | Data controllers must take appropriate security measures against unauthorized access to, alteration, or destruction of personal data held in their systems (DP(PPI)A 2003, controller security duty) | Scan |
BS-DPA-ACC Accuracy and Currency of Data | Personal data must be accurate and, where necessary, kept up to date, requiring version tracking of the software maintaining records (DP(PPI)A 2003, accuracy duty) | Scan |
BS-DPA-INV Knowledge of Held Data and Systems | A controller must know what personal data it keeps and for what purpose, presupposing an inventory of the processing software (DP(PPI)A 2003, controller duties) | Scan |
BS-DPA-PROC Data Processor Safeguards | Processing carried out by data processors on a controller's behalf must be governed by equivalent safeguards, so processing-component suppliers must be identifiable (DP(PPI)A 2003, data-processor provisions) | Scan |
BS-DPA-DOC Documented Processing Environment | Accountability to the Data Protection Commissioner requires a documented, identifiable record of the processing environment (DP(PPI)A 2003, Commissioner oversight) | Scan |
Policy templates
All 22 from the standard set, adapted to BS DPA.
Aruba Personal Data Protection Ordinance
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Barbados Data Protection Act 2019
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.