French Polynesia Loi Informatique et Libertes

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	PF LIL
Region	Asia-Pacific
Country or scope	French Polynesia
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers PF LIL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`PF-LIL-121` Security of Processing	The controller must take all necessary precautions, given the nature of the data and processing risks, to preserve data security and prevent alteration or access by unauthorized third parties, including integrity verification of processing software (Loi 78-17, art. 121)	Scan
`PF-LIL-4` Data Quality and Integrity Principles	Personal data must be accurate, kept up to date and processed in a manner guaranteeing appropriate security, requiring known versions for every processing component (Loi 78-17, art. 4 principles)	Scan
`PF-LIL-REC` Records of Processing	GDPR-standard record-keeping obligations extended to French Polynesia require a named, populated inventory of processing systems (Loi 78-17, GDPR Art. 30-standard record duty as extended overseas)	Scan
`PF-LIL-PROC` Processor Guarantees	Controllers may only engage processors presenting sufficient guarantees, requiring supplier visibility for third-party components handling personal data (Loi 78-17, GDPR Art. 28-standard processor rules as extended overseas)	Scan
`PF-LIL-BRE` Breach Notification Readiness	Breach-notification duties to the CNIL require identifying exactly which software components an incident affected (Loi 78-17, GDPR Art. 33-standard breach notification as extended overseas)	Scan

All 22 from the standard set, adapted to PF LIL.