Myanmar Law Protecting Privacy and Security of Citizens 2017

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	MM Privacy
Region	Asia-Pacific
Country or scope	Myanmar
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers MM Privacy

Scan requirements: 4, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 4 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`MM-LPPS-8` Non-Interference with Personal Data	Unlawful interference with a citizen's personal data and communications is prohibited, so operators should be able to detect unauthorised modification via integrity hashes on system components (Law No. 5/2017, s. 8 prohibitions)	Scan
`MM-LPPS-INV` Knowledge of Data-Holding Systems	Protecting citizens' personal data from unlawful access requires the holder to know which software systems store or process that data (Law No. 5/2017, protection of privacy and security of citizens)	Scan
`MM-LPPS-ID` Identifiable Components	Investigating and remedying unlawful access to personal data requires the components of processing systems to be uniquely identifiable (Law No. 5/2017, enforcement and penalty provisions)	Scan
`MM-LPPS-DOC` Traceable System Records	Demonstrating lawful handling of citizens' data requires system documentation to carry a document identity and creation timestamp (Law No. 5/2017, safeguarding duties)	Scan

All 22 from the standard set, adapted to MM Privacy.