Bahrain PDPL

Bahrain Personal Data Protection Law - data subject rights, registration, cross-border transfers.


Short name	BH PDPL
Region	Middle East & Africa
Country or scope	Bahrain
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers BH PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below, plus 6 controls from Safeguard's control catalog for BH PDPL.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 25: 3 written for BH PDPL and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`BH-PDPL-SEC` Security and Integrity Measures	Data managers must apply technical and organizational measures protecting personal data against unauthorized or accidental destruction, loss or alteration; integrity hashes over the software inventory evidence such measures (Law 30/2018, security-of-processing obligation)	Scan
`BH-PDPL-NOTIF` Notification of Processing Operations	Certain processing operations must be notified to or authorized by the Personal Data Protection Authority with identifying details; a uniquely identified, timestamped SBOM supports notification-grade documentation of processing systems (Law 30/2018, notification/authorization provisions)	Scan
`BH-PDPL-PROC` Processing on Behalf of the Manager	Data processors acting for a data manager must offer sufficient guarantees and act only on instructions, which requires knowing which suppliers stand behind the processing software (Law 30/2018, processor-obligations provision)	Scan
`BH-PDPL-QUAL` Data Accuracy and Currency	Personal data must be accurate and kept up to date for its purpose; the parallel discipline for the processing estate requires components with complete names and versions (Law 30/2018, data-quality principles)	Scan
`BH-PDPL-XBORDER` Cross-Border Transfer Readiness	Transfers outside Bahrain are limited to jurisdictions with sufficient protection or require authorization; establishing what is transferred and by which systems requires precisely identifiable components (Law 30/2018, cross-border transfer provisions)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`BPDPL-ART3`	Core Processing Principles (Art. 3-7)
`BPDPL-ART10`	Data Subject Rights (Art. 10-14)
`BPDPL-ART18`	Data Security Obligations (Art. 18)
`BPDPL-ART21`	Cross-Border Transfer Safeguards (Art. 21)
`BPDPL-DPO-1`	Data Protection Officer Appointment
`BPDPL-DPIA-1`	Data Protection Impact Assessment

Policy templates

Written for BH PDPL:

Bahrain PDPL: Privacy Notice
Bahrain PDPL: Information Security Policy
Bahrain PDPL: Breach Notification Procedure

And 22 from the standard set, adapted to BH PDPL.