Compliance FrameworksMiddle East & Africa
Iraq National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | IQ Privacy |
| Region | Middle East & Africa |
| Country or scope | Iraq |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers IQ Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
IQ-CONST-17 Constitutional Privacy Protection | Every individual is guaranteed personal privacy, so systems that handle personal information must be identifiable via standard identifiers in order to protect that right (Constitution of Iraq 2005, Art. 17) | Scan |
IQ-CONST-40 Communications Confidentiality | Confidentiality of communications and correspondence may not be violated, requiring verifiable integrity of the software components that carry or process communications (Constitution of Iraq 2005, Art. 40) | Scan |
IQ-PDPL-VER Draft-Law Security Obligation | The draft data-protection law obliges controllers to secure personal data, which requires that processing components carry known, concrete versions so weaknesses can be assessed and remedied (draft Personal Data Protection Law 2021, security obligations) | Scan |
IQ-PDPL-REC Records of Processing | Accountability duties in the draft law presuppose a maintained, named inventory of the software components that perform personal-data processing (draft Personal Data Protection Law 2021, accountability provisions) | Scan |
IQ-PDPL-TRANS Transparency of Processing | Data subjects are owed transparency about processing of their data, presupposing documented, uniquely identified and timestamped records of the processing environment (draft Personal Data Protection Law 2021, transparency provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to IQ Privacy.