Lesotho Data Protection Act 2011

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	LS DPA
Region	Middle East & Africa
Country or scope	Lesotho
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers LS DPA

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`LS-DPA-SEC` Security Measures for Integrity of Data	A data controller must secure the integrity of personal information against loss, damage, unauthorized destruction and unlawful access, presuming integrity verification of the software that processes it (Data Protection Act 2011, Part III security-measures principle)	Scan
`LS-DPA-NOT` Notification with Description of Security Measures	Controllers must notify the Commission of processing, including a general description of security measures, which presupposes an enumerated inventory of the processing systems and their components (Data Protection Act 2011, notification obligation)	Scan
`LS-DPA-CTRL` Identified, Accountable Controller	The notification must state the name and address of the controller, so processing documentation should record who created and is accountable for the system description (Data Protection Act 2011, notification obligation)	Scan
`LS-DPA-QUAL` Data Quality Principle	Information must be complete, accurate and not misleading; applied to the processing stack this requires each component to carry both a name and a version (Data Protection Act 2011, Part III data-quality principle)	Scan
`LS-DPA-DOC` Dated, Identifiable Processing Records	Commission oversight of notified processing requires dated and identifiable documentation of the systems involved, satisfied by an SBOM with a document ID and creation timestamp (Data Protection Act 2011, accountability to the Commission)	Scan

All 22 from the standard set, adapted to LS DPA.