Safeguard Docs
Compliance FrameworksAmericas

Bahamas Data Protection Act 2003

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.

Short nameBS DPA
RegionAmericas
Country or scopeBahamas
SectorPrivacy
In your workspaceOff until you switch it on in Compliance โ€บ Manage.

How Safeguard covers BS DPA

  • Scan requirements: 5, all decided by a scan.
  • Controls: the scan requirements below.
  • Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
  • Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

RequirementWhat Safeguard checksDecided by
BS-DPA-SEC Appropriate Security MeasuresData controllers must take appropriate security measures against unauthorized access to, alteration, or destruction of personal data held in their systems (DP(PPI)A 2003, controller security duty)Scan
BS-DPA-ACC Accuracy and Currency of DataPersonal data must be accurate and, where necessary, kept up to date, requiring version tracking of the software maintaining records (DP(PPI)A 2003, accuracy duty)Scan
BS-DPA-INV Knowledge of Held Data and SystemsA controller must know what personal data it keeps and for what purpose, presupposing an inventory of the processing software (DP(PPI)A 2003, controller duties)Scan
BS-DPA-PROC Data Processor SafeguardsProcessing carried out by data processors on a controller's behalf must be governed by equivalent safeguards, so processing-component suppliers must be identifiable (DP(PPI)A 2003, data-processor provisions)Scan
BS-DPA-DOC Documented Processing EnvironmentAccountability to the Data Protection Commissioner requires a documented, identifiable record of the processing environment (DP(PPI)A 2003, Commissioner oversight)Scan

Policy templates

All 22 from the standard set, adapted to BS DPA.

On this page