Isle of Man Data Protection Act 2018
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | IM DPA 2018 |
| Region | Europe |
| Country or scope | Isle of Man |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers IM DPA 2018
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
IM-AGDPR-32 Security of Processing | Controllers and processors must implement technical and organisational measures ensuring confidentiality, integrity, availability and resilience of processing systems, including software integrity verification (Applied GDPR Art. 32) | Scan |
IM-AGDPR-5F Integrity and Confidentiality Principle | Personal data must be processed with appropriate security, requiring known versions of every processing component so security state is assessable (Applied GDPR Art. 5(1)(f)) | Scan |
IM-AGDPR-30 Records of Processing Activities | Controllers and processors must maintain records of processing activities, including a named, populated inventory of processing software (Applied GDPR Art. 30) | Scan |
IM-AGDPR-28 Processor Guarantees | Controllers may only engage processors providing sufficient guarantees, requiring supplier visibility for third-party components that handle personal data (Applied GDPR Art. 28) | Scan |
IM-AGDPR-33 Breach Notification Readiness | 72-hour breach notification requires the ability to identify precisely which software components an incident affected (Applied GDPR Arts. 33-34) | Scan |
Policy templates
All 22 from the standard set, adapted to IM DPA 2018.
Ireland Data Protection Act 2018
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Italy ACN Cybersecurity
Agenzia per la Cybersicurezza Nazionale guidelines - National Cybersecurity Perimeter, supply chain.