Cape Verde Law No. 133/V/2001 on Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	CV PDPL
Region	Middle East & Africa
Country or scope	Cape Verde
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers CV PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`CV-PDPL-SEC` Security of Processing	Controllers must apply technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration and unauthorized access, presuming integrity controls over the processing software (Law No. 133/V/2001, security-of-processing obligation)	Scan
`CV-PDPL-NOT` Notification to the CNPD	Processing operations must be notified to the CNPD before they are carried out, which presupposes an enumerated inventory of the systems and software components performing the processing (Law No. 133/V/2001, notification regime)	Scan
`CV-PDPL-PROC` Processor Guarantees	Processing carried out on the controller's behalf must be entrusted to processors providing sufficient guarantees of technical security and organizational measures, requiring third-party software suppliers to be identified (Law No. 133/V/2001, processor obligation)	Scan
`CV-PDPL-QUAL` Data Quality and Currency	Personal data must be accurate and, where necessary, kept up to date; applied to processing systems this requires recorded component versions so outdated software can be identified (Law No. 133/V/2001, data-quality principle)	Scan
`CV-PDPL-DOC` Auditable Processing Documentation	CNPD oversight and the notification regime require dated, identifiable documentation of processing systems, satisfied by an SBOM bearing a document ID and creation timestamp (Law No. 133/V/2001, accountability to the CNPD)	Scan

All 22 from the standard set, adapted to CV PDPL.