Seychelles Data Protection Act 2003
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | SC DPA |
| Region | Middle East & Africa |
| Country or scope | Seychelles |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SC DPA
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SC-DPA-SEC Security Principle | Appropriate security measures must be taken against unauthorized access to, or alteration, disclosure or destruction of, personal data, presuming integrity controls over the software that processes it (Data Protection Act 2003, security principle; carried forward in the Data Protection Act 2023) | Scan |
SC-DPA-REG Registration of Data Users | Persons holding or processing personal data must register particulars of the data held and the purposes of processing, which presupposes an enumerated inventory of the processing systems and their components (Data Protection Act 2003, registration regime) | Scan |
SC-DPA-QUAL Accuracy and Currency Principle | Personal data must be accurate and, where necessary, kept up to date; applied to the processing stack this requires each component to carry both a name and a version (Data Protection Act 2003, accuracy principle) | Scan |
SC-DPA-BUR Third-Party Processing Accountability | Processing carried out by service bureaus or other third parties on behalf of a data user remains subject to the Act's security and registration duties, requiring third-party software suppliers to be identified (Data Protection Act 2003, third-party processing provisions) | Scan |
SC-DPA-DOC Identifiable, Dated Records | Registration and supervisory oversight require dated, identifiable documentation of the data held and the systems processing it, satisfied by an SBOM with document ID and creation timestamp (Data Protection Act 2003, registration and oversight regime) | Scan |
Policy templates
All 22 from the standard set, adapted to SC DPA.
Senegal Law No. 2008-12 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Sierra Leone Cyber Security and Crime Act 2021
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.