Burkina Faso Law No. 010-2004 on Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | BF PDPL |
| Region | Middle East & Africa |
| Country or scope | Burkina Faso |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers BF PDPL
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
BF-PDPL-SEC Security and Confidentiality of Processing | The controller must take all precautions to preserve the security of the data, notably preventing its alteration, damage or communication to unauthorized third parties, presuming integrity controls over the processing software (Law No. 010-2004/AN, security obligation, reinforced by Law No. 001-2021/AN) | Scan |
BF-PDPL-DECL Prior Formalities with the CIL | Processing operations are subject to prior declaration to, or authorization by, the CIL, which presupposes an enumerated inventory of the systems and software components carrying out the processing (Law No. 010-2004/AN, declaration/authorization regime) | Scan |
BF-PDPL-PROC Third-Party and Processor Accountability | Processing carried out on behalf of the controller must be entrusted only to parties offering sufficient security guarantees, requiring third-party software suppliers to be identified and vetted (Law No. 010-2004/AN, processor obligation) | Scan |
BF-PDPL-QUAL Accuracy and Currency | Personal data must be accurate, complete and up to date; applied to processing systems this requires known component versions so outdated software can be identified and remediated (Law No. 010-2004/AN, data-quality principle) | Scan |
BF-PDPL-DOC Auditable Processing Documentation | CIL oversight requires dated, identifiable documentation describing the processing and its security measures, satisfied by an SBOM with document ID and creation timestamp (Law No. 010-2004/AN, accountability to the CIL) | Scan |
Policy templates
All 22 from the standard set, adapted to BF PDPL.
Botswana Data Protection Act 2018
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Cameroon Law 2010/012 on Cybersecurity
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.