Compliance FrameworksAmericas
Trinidad and Tobago Data Protection Act 2011
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | TT DPA |
| Region | Americas |
| Country or scope | Trinidad and Tobago |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance โบ Manage. |
How Safeguard covers TT DPA
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
TT-DPA-SEC Security Safeguards Principle | Personal information must be protected by safeguards appropriate to its sensitivity, including integrity protection for the systems that store it (DPA 2011 s.6 General Privacy Principles, security safeguard) | Scan |
TT-DPA-ACC Accuracy of Information | Organizations must keep personal information accurate and up to date, which requires precise version tracking of the software maintaining records (DPA 2011 s.6 General Privacy Principles, accuracy) | Scan |
TT-DPA-INV Accountability for Processing Systems | An organization is accountable for personal information under its control, presupposing an inventory of the systems and components handling it (DPA 2011 s.6 General Privacy Principles, accountability) | Scan |
TT-DPA-TP Third-Party Disclosure Controls | Disclosure to and processing by third parties must be controlled, so the suppliers behind processing components must be identified (DPA 2011, third-party disclosure provisions) | Scan |
TT-DPA-DOC Openness and Documentation | Policies and practices about information handling must be documented and available, met by an identifiable, timestamped record of the software environment (DPA 2011 s.6 General Privacy Principles, openness) | Scan |
Policy templates
All 22 from the standard set, adapted to TT DPA.