Compliance FrameworksMiddle East & Africa
Guinea Law L/2016/037 on Data Protection
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | GN Law 2016 |
| Region | Middle East & Africa |
| Country or scope | Guinea |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers GN Law 2016
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
GN-037-SEC Security of Processing Systems | Both the cybersecurity and data-protection parts of the law require systems handling personal data to be protected against intrusion and alteration; integrity hashes across components evidence this (Law L/2016/037/AN, security and cybersecurity provisions) | Scan |
GN-037-LEG Legitimate, Accurate Processing | Processing is legitimate only on consent or another lawful basis and the data handled must be accurate, presuming each processing component is fully identified by name and a concrete version (Law L/2016/037/AN, legitimacy-of-processing provisions) | Scan |
GN-037-PROC Third-Party Processing Accountability | Data processed through third-party software must remain attributable to named, accountable suppliers to prevent unlawful disclosure of personal or sensitive data (Law L/2016/037/AN, processing and sensitive-data provisions) | Scan |
GN-037-INV Processing Software Inventory | Controller obligations presuppose an enumerable, named inventory of the software components that collect and process personal data (Law L/2016/037/AN, controller obligations) | Scan |
GN-037-CYB Cybersecurity Version Hygiene | The cybercrime part of the law targets intrusion into information systems, and defending such systems requires deployed components to carry concrete, known versions for vulnerability assessment (Law L/2016/037/AN, Part 1 cybersecurity provisions) | Scan |
GN-037-TRANS Documented Processing Environment | Fair and lawful processing presupposes documented, uniquely identified and timestamped records of the processing environment (Law L/2016/037/AN, fair-processing provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to GN Law 2016.