Angola Law No. 22/11 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	AO PDPL
Region	Middle East & Africa
Country or scope	Angola
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers AO PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`AO-PDPL-SEC` Security Measures for Processing	Controllers must adopt technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration and unauthorised access, evidenced by integrity hashes on processing components (Law No. 22/11, security-of-processing obligations)	Scan
`AO-PDPL-NOT` Notification of Processing Operations	Processing operations must be notified to or authorised by the APD, which presupposes an inventory of the software systems performing the processing (Law No. 22/11, notification and authorisation regime)	Scan
`AO-PDPL-PROC` Subcontracted Processing Controls	Processing entrusted to a subcontractor must be governed by contract and offer sufficient security guarantees, so third-party software components must have named suppliers (Law No. 22/11, subcontracting provisions)	Scan
`AO-PDPL-ID` Identifiable Processing Components	Confidentiality and controlled access to processing systems require their components to be uniquely identifiable (Law No. 22/11, confidentiality and access-control duties)	Scan
`AO-PDPL-DOC` Traceable Documentation	Demonstrating lawful processing to the APD requires software records to be identifiable documents with a creation timestamp (Law No. 22/11, supervisory cooperation duties)	Scan

All 22 from the standard set, adapted to AO PDPL.