Laos Law on Electronic Data Protection 2017

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	LA EDPL
Region	Asia-Pacific
Country or scope	Laos
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers LA EDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`LA-EDPL-SEC` Electronic Data Security Measures	Data managers must apply technical measures to keep electronic data safe from unauthorised access, alteration or destruction, evidenced by integrity hashes on system components (Law No. 25/NA on Electronic Data Protection 2017, data-security obligations)	Scan
`LA-EDPL-CLS` Data and System Classification	Classifying electronic data as general or specific and managing it accordingly requires an inventory of the software components that store and process it (Law No. 25/NA 2017, data classification and management provisions)	Scan
`LA-EDPL-ACC` Accuracy and Completeness of Data Records	Electronic data must be kept accurate and complete, which extends to system records where every component carries both a name and a version (Law No. 25/NA 2017, data accuracy and storage duties)	Scan
`LA-EDPL-3P` Third-Party Data Handling	Disclosure of electronic data to third parties is restricted and third-party handlers bear duties, so third-party software components should have named suppliers (Law No. 25/NA 2017, obligations of data users and third parties)	Scan
`LA-EDPL-DOC` Traceable System Documentation	Managing electronic data under state supervision requires system documentation that is itself identifiable, with a document ID and creation timestamp (Law No. 25/NA 2017, data-management and reporting duties)	Scan

All 22 from the standard set, adapted to LA EDPL.