Compliance FrameworksAsia-Pacific
Afghanistan National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | AF Privacy |
| Region | Asia-Pacific |
| Country or scope | Afghanistan |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers AF Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
AF-C37-SEC Confidentiality Safeguards for Processing Systems | Systems that handle personal communications and data should be protected against tampering, so components need integrity hashes that let unauthorised alteration be detected (Constitution 2004, Art. 37 confidentiality guarantee). | Scan |
AF-C37-INV Inventory of Data-Handling Software | Honouring a confidentiality guarantee presupposes knowing which software components touch personal communications, so a component inventory must exist (Constitution 2004, Art. 37). | Scan |
AF-ICT-SUP Third-Party Service Accountability | Telecom licensing rules make operators answerable for services delivered through third parties, so third-party components should carry named suppliers (Afghan telecom-sector licensing rules). | Scan |
AF-ICT-VER Version Records for Incident Assessment | Assessing whether confidentiality of communications has been compromised requires knowing the versions of the software in operation (Constitution 2004, Art. 37; sectoral ICT rules). | Scan |
AF-ICT-DOC Documented Software Records | Demonstrating compliance with confidentiality obligations requires dated, identifiable documentation of the systems used to process data (Constitution 2004, Art. 37; sectoral ICT rules). | Scan |
Policy templates
All 22 from the standard set, adapted to AF Privacy.