Saint Kitts and Nevis Data Protection Act 2018

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	KN DPA 2018
Region	Americas
Country or scope	Saint Kitts and Nevis
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers KN DPA 2018

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`KN-DPA-SEC` Security Principle	Data users must take practical steps to protect personal data from loss, misuse, modification, or unauthorized access, having regard to the security measures incorporated into the equipment and systems where data is stored; integrity hashes on those software components evidence such steps (DPA 2018, Security Principle, Part II)	Scan
`KN-DPA-INTEG` Data Integrity Principle	Personal data must be accurate, complete, and not misleading, which presumes the software performing the processing is itself fully identified by name and concrete version (DPA 2018, Data Integrity Principle, Part II)	Scan
`KN-DPA-PROC` Processor Reliability	Data users must ensure the reliability, integrity, and competence of processors and personnel with access to personal data, requiring named, accountable suppliers for the processing software (DPA 2018, data-processor obligations)	Scan
`KN-DPA-NOT` Notice and Transparency	Data users must give data subjects notice of the processing of their personal data, which presupposes documented, uniquely identified and timestamped records of the processing environment (DPA 2018, Notice and Choice Principle, Part II)	Scan
`KN-DPA-INV` Processing Records	The Act's obligations on data users to manage, retain, and disclose personal data responsibly presuppose a maintained inventory of the software components that perform the processing (DPA 2018, data-user obligations)	Scan

All 22 from the standard set, adapted to KN DPA 2018.