Barbados Data Protection Act 2019

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	BB DPA
Region	Americas
Country or scope	Barbados
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers BB DPA

Scan requirements: 6, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`BB-DPA-SEC` Security of Processing	Controllers and processors must implement appropriate technical and organizational measures to secure processing, including integrity of processing systems (DPA 2019, GDPR Art. 32-style security-of-processing obligation)	Scan
`BB-DPA-ROPA` Records of Processing Activities	Controllers must maintain records of processing activities, which presupposes an inventory of the software components involved in processing (DPA 2019, records-of-processing duty)	Scan
`BB-DPA-PROC` Processor Obligations	Processing on behalf of a controller requires binding contracts and sufficient guarantees, so third-party component suppliers must be identified (DPA 2019, processor-contract obligation)	Scan
`BB-DPA-BREACH` Breach Notification Readiness	Personal data breaches must be notified to the Commissioner, which requires the ability to identify exactly which components were affected (DPA 2019, breach-notification duty)	Scan
`BB-DPA-ACC` Accuracy Principle	Personal data must be accurate and kept up to date, requiring precise version tracking of the software maintaining it (DPA 2019, accuracy principle)	Scan
`BB-DPA-DOC` Accountability Documentation	The controller must be able to demonstrate compliance, met by an identifiable, timestamped machine-readable record of the processing environment (DPA 2019, accountability principle)	Scan

All 22 from the standard set, adapted to BB DPA.