Monaco Law No. 1.165 on Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	MC L1165
Region	Europe
Country or scope	Monaco
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers MC L1165

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`MC-1165-17` Security Precautions	Anyone processing personal information must take all useful precautions to preserve its security and prevent it from being altered, damaged or accessed by unauthorized third parties; component integrity hashes evidence protection against alteration (Law 1.165 Art. 17)	Scan
`MC-1165-DECL` Declaration of Automated Processing	Automated processing of personal information must be declared to or authorized by the CCIN before implementation, which presupposes an enumeration of the systems and software carrying out the processing (Law 1.165 declaration/authorization provisions)	Scan
`MC-1165-INV` Processing System Inventory	Fulfilling declaration and security duties requires knowing which software components make up each processing system (Law 1.165 controller obligations)	Scan
`MC-1165-SUB` Outsourced Processing Accountability	Where processing is carried out through service providers, the declarant remains responsible for the required security precautions, requiring visibility into the suppliers behind the processing software (Law 1.165 third-party processing provisions)	Scan
`MC-1165-VER` Maintained Security of Systems	Security precautions must remain effective over the lifetime of the processing, which requires knowing exact versions of deployed components so weaknesses can be assessed (Law 1.165 Art. 17 ongoing-security duty)	Scan

All 22 from the standard set, adapted to MC L1165.