Botswana Data Protection Act 2018

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	BW DPA
Region	Middle East & Africa
Country or scope	Botswana
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers BW DPA

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`BW-DPA-SEC` Security Measures for Processing	Data controllers must implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration and unauthorised access, evidenced by integrity hashes on processing components (DPA 2018, security-of-processing obligations)	Scan
`BW-DPA-INV` Processing System Inventory	Notification of processing operations to the Commission presupposes that the controller maintains an inventory of the software systems used to process personal data (DPA 2018, notification and record-keeping provisions)	Scan
`BW-DPA-PROC` Processor Engagement Controls	Controllers must choose processors providing sufficient guarantees of security and ensure processing under contract, so third-party software components must have named suppliers (DPA 2018, controller-processor provisions)	Scan
`BW-DPA-ID` Component Identifiability	Investigating unauthorised access and cooperating with the Commission requires processing-system components to be uniquely identifiable (DPA 2018, enforcement and compliance provisions)	Scan
`BW-DPA-DOC` Traceable Documentation	Demonstrating lawful processing to the regulator requires software records to be identifiable documents with a creation timestamp (DPA 2018, accountability and notification duties)	Scan

All 22 from the standard set, adapted to BW DPA.