Somalia Data Protection Act 2023
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | SO DPA 2023 |
| Region | Middle East & Africa |
| Country or scope | Somalia |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SO DPA 2023
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SO-DPA-SEC Data Security Measures | Controllers must implement security measures protecting personal data against unauthorized access, loss, or alteration; integrity hashes across processing components evidence those measures (DPA 2023, Data Security and Data Impact Assessments chapter) | Scan |
SO-DPA-BRE Breach Notification Readiness | Data breaches must be reported to the Data Protection Authority, which requires that affected components are identifiable via standard identifiers to scope the breach quickly (DPA 2023, breach-notification obligations) | Scan |
SO-DPA-VEND Vendor Management | Controllers are responsible for the vendors that process personal data on their behalf, so third-party software components must carry named, accountable suppliers (DPA 2023, vendor-management obligations) | Scan |
SO-DPA-REG Registration and Records | Registration with the Data Protection Authority and cooperation duties presuppose an enumerable, named inventory of the software components performing processing (DPA 2023, Registration and Fees chapter) | Scan |
SO-DPA-PRIN Accuracy of Processing | Processing principles require personal data to be accurate and up to date, presuming each processing component is fully identified by both name and a concrete version (DPA 2023, Principles Governing Processing of Personal Data chapter) | Scan |
SO-DPA-TRANS Transparent Processing | Data subjects are owed transparent information about processing, presupposing documented, uniquely identified and timestamped records of the processing environment (DPA 2023, data-subject rights chapter) | Scan |
Policy templates
All 22 from the standard set, adapted to SO DPA 2023.
Sierra Leone Cyber Security and Crime Act 2021
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
South Africa POPIA
Protection of Personal Information Act - eight conditions for lawful processing, IR, accountability.