Chad Law No. 007/PR/2015 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	TD PDPL
Region	Middle East & Africa
Country or scope	Chad
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers TD PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`TD-PDPL-SEC` Security Safeguards Including Encryption	Personal data must be protected by technical safeguards against unauthorized access, loss or alteration, with encryption expected for data in transit, presuming cryptographic integrity controls across the processing software (Law No. 007/PR/2015, security obligation)	Scan
`TD-PDPL-DPIA` High-Risk Processing Assessment	Impact assessments are required for high-risk processing activities, which presupposes that the processing system is named and its constituent software components are enumerated (Law No. 007/PR/2015, impact-assessment obligation)	Scan
`TD-PDPL-DPO` Responsible Contact for Data Protection	Entities processing large volumes of sensitive data must designate a data protection officer, so processing documentation should record an accountable creator contact (Law No. 007/PR/2015, DPO obligation)	Scan
`TD-PDPL-PROC` Third-Party Processing Accountability	Processing entrusted to third parties must remain subject to the controller's security and confidentiality duties, requiring the suppliers of processing software to be identified (Law No. 007/PR/2015, processor obligation)	Scan
`TD-PDPL-INV` Known Processing Systems	Lawful, fair and non-fraudulent collection, processing, storage and transmission of personal data presupposes that the organization knows which software components handle the data (Law No. 007/PR/2015, lawful-processing principles)	Scan

All 22 from the standard set, adapted to TD PDPL.