Syria National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | SY Privacy |
| Region | Middle East & Africa |
| Country or scope | Syria |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SY Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SY-DP-SEC Protection Against Unauthorized Access | Unauthorized access to and alteration of personal data are criminalized, so controllers need verifiable integrity of the components that store and process such data (Cybercrime Law No. 20 of 2022, unauthorized-access and data offenses) | Scan |
SY-DP-COLL Lawful Collection Accountability | Because unapproved collection or dissemination of personal data is penalized, an organization must maintain a named inventory of every software component that collects or processes such data (Cybercrime Law No. 20 of 2022, data-collection offenses) | Scan |
SY-DP-ID Identifiable Processing Components | Assessing exposure of private data requires that processing components are identifiable via standard identifiers (constitutional privacy guarantees, applied to incident assessment) | Scan |
SY-DP-CONST Constitutional Privacy Documentation | The Constitution guarantees the privacy of private life and communications, and demonstrating respect for it presupposes documented, uniquely identified and timestamped records of the processing environment (Constitution of Syria 2012, privacy guarantees) | Scan |
SY-DP-PROC Third-Party Processing Accountability | Data handled through third-party software must remain attributable to accountable, named suppliers to avoid unlawful disclosure (Cybercrime Law No. 20 of 2022, data-dissemination offenses) | Scan |
Policy templates
All 22 from the standard set, adapted to SY Privacy.
Syria Cybercrime Law No. 20 of 2022
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
Tanzania Cybercrimes Act 2015
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.