Compliance FrameworksAmericas
Panama Law No. 81 of 2019 on Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | PA L81 |
| Region | Americas |
| Country or scope | Panama |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers PA L81
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
PA-L81-SEC Technical and Organizational Security Measures | Controllers must adopt technical and organizational measures to protect personal data against unauthorized access, loss or destruction, including encryption and access controls, presuming verifiable integrity of the processing software (Law No. 81 of 2019, security-measures obligation) | Scan |
PA-L81-BREACH Breach Notification Readiness | Significant data breaches must be notified to ANTAI and affected data subjects; assessing scope and impact requires precisely identifiable components (PURL/CPE) in the processing stack (Law No. 81 of 2019, breach-notification obligation) | Scan |
PA-L81-ROPA Record of Processing Activities | Organizations must maintain a record of their data-processing activities, which requires an enumerated inventory of the software systems and components that process personal data (Law No. 81 of 2019 with Executive Decree No. 285 of 2021, records obligation) | Scan |
PA-L81-PROC Processor and Third-Party Safeguards | Processing performed by third parties on the controller's behalf must be governed by adequate safeguards, requiring the external suppliers of processing software and services to be identified (Law No. 81 of 2019, controller-processor obligations) | Scan |
PA-L81-DPO Accountable Data Protection Contact | In prescribed cases organizations must appoint a data protection officer to oversee compliance, so processing documentation should record an accountable creator contact (Law No. 81 of 2019, DPO obligation) | Scan |
PA-L81-DOC Dated, Identifiable Documentation | Demonstrating compliance to ANTAI requires dated, identifiable documentation of processing systems, satisfied by an SBOM with a document ID and creation timestamp (Law No. 81 of 2019, accountability principle) | Scan |
Policy templates
All 22 from the standard set, adapted to PA L81.