Mali Law No. 2013-015 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	ML PDPL
Region	Middle East & Africa
Country or scope	Mali
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers ML PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`ML-PDPL-SEC` Security of Processing	Controllers must take all useful precautions to preserve the security of personal data and prevent its alteration, damage or access by unauthorized third parties, presuming integrity controls over processing software (Law No. 2013-015, security-of-processing obligation)	Scan
`ML-PDPL-DECL` Prior Formalities with the APDP	Processing of personal data is subject to prior declaration to, or authorization by, the APDP, which presupposes an inventory of the software systems and components performing the processing (Law No. 2013-015, declaration/authorization regime)	Scan
`ML-PDPL-PROC` Processor Oversight	Outsourced processing requires a processor presenting sufficient security and confidentiality guarantees, acting only on the controller's instructions, which requires third-party software suppliers to be identified (Law No. 2013-015, processor-oversight obligation)	Scan
`ML-PDPL-QUAL` Data Quality and Maintained Systems	Personal data must be accurate and kept up to date, which for the systems processing it requires knowing component versions so stale or unmaintained software can be identified (Law No. 2013-015, data-quality principle)	Scan
`ML-PDPL-DOC` Documented Processing Records	APDP oversight and the declaration regime require dated, identifiable documentation of processing systems, satisfied by an SBOM bearing a document ID and creation timestamp (Law No. 2013-015, accountability to the APDP)	Scan

All 22 from the standard set, adapted to ML PDPL.