Safeguard Docs
Compliance FrameworksAmericas

Americas

The 107 frameworks for Americas in Safeguard's library, and how Safeguard covers each.

Laws, regulations and standards of North, Central and South America and the Caribbean. Each framework's page lists what a scan checks, its controls, its policy templates and its automated tests. How coverage works: Compliance frameworks.

FrameworkCountry or scopeSectorScan requirementsCatalog controls
Anguilla Data Protection Act 2020AnguillaPrivacy5None
Antigua and Barbuda Data Protection Act 2013Antigua and BarbudaPrivacy5None
Argentina PDPL (Law 25.326)ArgentinaPrivacy610
Aruba Personal Data Protection OrdinanceArubaPrivacy5None
Bahamas Data Protection Act 2003BahamasPrivacy5None
Barbados Data Protection Act 2019BarbadosPrivacy6None
Belize Data Protection Act 2021BelizePrivacy6None
Bermuda Personal Information Protection Act 2016BermudaPrivacy6None
Bolivia Supreme Decree 1793BoliviaPrivacy5None
Brazil LGPDBrazilPrivacy612
British Virgin Islands Data Protection Act 2021British Virgin IslandsPrivacy6None
Canada CPPACanadaPrivacy610
Canada PIPEDACanadaPrivacy611
Cayman Islands Data Protection Act 2017Cayman IslandsPrivacy6None
CCPA / CPRAUnited StatesPrivacy414
Chile Law 19.628ChilePrivacy510
CMMC 2.0United StatesDefense613
Colombia Law 1581ColombiaPrivacy611
Colorado CPAUnited StatesPrivacy69
Connecticut CTDPAUnited StatesPrivacy69
COPPAUnited StatesPrivacy59
Costa Rica Law No. 8968 on Personal DataCosta RicaPrivacy5None
Cuba Law 149/2022 on Personal Data ProtectionCubaPrivacy5None
Curacao Personal Data Protection OrdinanceCuracaoPrivacy5None
Delaware PDPAUnited StatesPrivacy69
DFARS 252.204-7012United StatesDefense68
Dominica National ICT / Privacy FrameworkDominicaPrivacy5None
Dominican Republic Law No. 172-13 on Personal DataDominican RepublicPrivacy5None
Ecuador Organic Law on Personal Data ProtectionEcuadorPrivacy6None
El Salvador Cybersecurity and Information Security Law 2024El SalvadorGovernment6None
El Salvador Personal Data Protection Law 2024El SalvadorPrivacy6None
Falkland Islands Data Protection OrdinanceFalkland IslandsPrivacy5None
FCRA / FACTAUnited StatesFinance69
FDA 21 CFR Part 11United StatesHealthcare614
FDA Medical DeviceUnited StatesHealthcare614
FedRAMPUnited StatesCloud611
FERPAUnited StatesEducation58
FFIEC CATUnited StatesFinance614
FIPS 140-3United StatesGovernment68
FISMAUnited StatesGovernment611
Florida Digital Bill of RightsUnited StatesPrivacy68
FTC Safeguards RuleUnited StatesFinance412
GLBAUnited StatesFinance611
Greenland Data Protection ActGreenlandPrivacy5None
Grenada National ICT / Privacy FrameworkGrenadaPrivacy5None
Guatemala Ley de Acceso a la Informacion PublicaGuatemalaPrivacy5None
Guyana Data Protection Act 2023GuyanaPrivacy6None
Haiti National Privacy FrameworkHaitiPrivacy5None
HIPAA / HITECHUnited StatesHealthcare614
HIPAA Security RuleUnited StatesHealthcare618
HITRUST CSFUnited StatesHealthcare617
Honduras Ley de Transparencia (Habeas Data)HondurasPrivacy5None
Illinois BIPAUnited StatesPrivacy58
Indiana CDPAUnited StatesPrivacy68
Iowa CDPAUnited StatesPrivacy57
Jamaica DPAJamaicaPrivacy611
Maryland MODPAUnited StatesPrivacy78
Massachusetts 201 CMR 17.00United StatesPrivacy610
Mexico LFPDPPPMexicoPrivacy610
Minnesota CDPAUnited StatesPrivacy68
Montana CDPAUnited StatesPrivacy68
Montserrat National ICT / Privacy FrameworkMontserratPrivacy5None
NDAA Section 889United StatesDefense58
NERC CIPUnited StatesEnergy612
New Hampshire DPAUnited StatesPrivacy68
New Jersey CDPAUnited StatesPrivacy68
Nicaragua Law No. 787 on Personal DataNicaraguaPrivacy5None
NIST AI RMFUnited StatesAI413
NIST CSF 2.0United StatesGovernment712
NIST CSF 2.0 (Full)United StatesGovernment613
NIST Privacy FrameworkUnited StatesPrivacy612
NIST SP 800-161United StatesGovernment612
NIST SP 800-171United StatesDefense512
NIST SP 800-207United StatesGovernment411
NIST SP 800-218AUnited StatesAI611
NIST SP 800-37 RMFUnited StatesGovernment613
NIST SP 800-53United StatesGovernment715
NIST SP 800-63United StatesGovernment612
NIST SP 800-66 r2United StatesHealthcare610
NIST SP 800-82United StatesEnergy612
NIST SSDFUnited StatesGovernment614
NY DFS 23 NYCRR 500United StatesFinance715
NY SHIELD ActUnited StatesPrivacy511
Oregon OCPAUnited StatesPrivacy68
Panama Law No. 81 of 2019 on Personal DataPanamaPrivacy6None
Paraguay Law No. 6534/2020 on Personal DataParaguayPrivacy5None
Peru Law 29733PeruPrivacy510
Puerto Rico Act 111-2005 / US FrameworksPuerto RicoPrivacy5None
Quebec Law 25CanadaPrivacy69
Saint Kitts and Nevis Data Protection Act 2018Saint Kitts and NevisPrivacy5None
Saint Lucia Data Protection ActSaint LuciaPrivacy5None
Saint Vincent National ICT / Privacy FrameworkSaint Vincent and the GrenadinesPrivacy5None
SOC2 Type 1United StatesGeneral6161
SOC2 Type 2United StatesGeneral6161
SOX ITGCUnited StatesFinance614
StateRAMPUnited StatesCloud69
Suriname National Privacy FrameworkSurinamePrivacy5None
Tennessee TIPAUnited StatesPrivacy68
Texas TDPSAUnited StatesPrivacy69
Trinidad and Tobago Data Protection Act 2011Trinidad and TobagoPrivacy5None
TSA Pipeline Security DirectivesUnited StatesEnergy610
Turks and Caicos Data Protection OrdinanceTurks and CaicosPrivacy5None
Uruguay Law 18.331UruguayPrivacy59
Utah UCPAUnited StatesPrivacy68
Venezuela Constitutional Habeas DataVenezuelaPrivacy5None
Virginia CDPAUnited StatesPrivacy610
Washington My Health My Data ActUnited StatesHealthcare611

Compliance frameworks

How Safeguard covers each of the 373 frameworks in its library: scan requirements, controls, automated tests and policy templates, and what a readiness score counts.

Anguilla Data Protection Act 2020

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.