Compliance FrameworksEurope
Montenegro Law on Personal Data Protection
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | ME LPDP |
| Region | Europe |
| Country or scope | Montenegro |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers ME LPDP
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
ME-LPDP-SEC Protection of Personal Data Filing Systems | Controllers must apply technical and organizational measures protecting personal data against loss, destruction, alteration and unauthorized access; integrity hashes on the software components handling data evidence this control (ME LPDP data-security provisions) | Scan |
ME-LPDP-REC Records of Filing Systems | Controllers must keep records of the personal data filing systems they establish, which presupposes an inventory of the software systems and components that operate them (ME LPDP records provisions) | Scan |
ME-LPDP-PROC Processing by Processors | Processing entrusted to a processor must be governed by a contract ensuring the same level of protection, requiring the controller to know the suppliers behind its processing software (ME LPDP processor provisions) | Scan |
ME-LPDP-DOC Documented Protection Measures | Controllers must be able to demonstrate the protective measures applied, supported by a formally identified and timestamped record of the software processing personal data (ME LPDP accountability duties) | Scan |
ME-LPDP-VER Adequacy of Deployed Software | Keeping protection measures adequate over time requires knowing exact versions of deployed components so weaknesses can be identified and corrected (ME LPDP ongoing-security duty) | Scan |
Policy templates
All 22 from the standard set, adapted to ME LPDP.