Safeguard Docs
Compliance FrameworksAmericas

Guatemala Ley de Acceso a la Informacion Publica

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.

Short nameGT LAIP
RegionAmericas
Country or scopeGuatemala
SectorPrivacy
In your workspaceOff until you switch it on in Compliance โ€บ Manage.

How Safeguard covers GT LAIP

  • Scan requirements: 5, all decided by a scan.
  • Controls: the scan requirements below.
  • Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
  • Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

RequirementWhat Safeguard checksDecided by
GT-LAIP-SEC Protection of Personal Data Held in SystemsSubjects holding personal data must protect it against alteration, loss, and unauthorized access, implying integrity controls over the systems storing it (Decree 57-2008, personal-data protection duties)Scan
GT-LAIP-INV Knowledge of Information SystemsObligated subjects must know and document the information systems in which personal data resides, presupposing a component inventory (Decree 57-2008, information-systems documentation duties)Scan
GT-LAIP-HD Habeas Data Correction ReadinessThe right of data subjects to access and correct their personal data requires accurate, current record-keeping systems with tracked versions (Decree 57-2008, habeas data provisions)Scan
GT-LAIP-TRANS Transparency of Processing EnvironmentThe law's transparency mandate implies identifiable, timestamped documentation of the systems that handle personal information (Decree 57-2008, transparency obligations)Scan
GT-LAIP-TP Third-Party Handling AccountabilityPersonal data may not be circulated or commercialized without consent, so any third-party components handling it must have identified suppliers (Decree 57-2008, restrictions on transfer of personal data)Scan

Policy templates

All 22 from the standard set, adapted to GT LAIP.

On this page