Guam Data Breach Law / US Frameworks

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	GU Data Law
Region	Asia-Pacific
Country or scope	Guam
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers GU Data Law

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`GU-GCA-48-NOTIF` Breach Notification Readiness	Covered entities must notify affected parties without unreasonable delay after a breach, which requires identifying precisely which systems and components were compromised (9 G.C.A. § 48.10 et seq.)	Scan
`GU-GCA-48-SCOPE` Scope and Severity Determination	Notices must describe the steps taken to determine the scope and severity of the breach, presupposing version-tracked knowledge of the affected software environment (9 G.C.A. ch. 48, notice-content requirements)	Scan
`GU-GCA-48-CAT` Disclosed-Category Reporting	Notices must state the categories of personal information disclosed, requiring fully described data-handling components with both name and version (9 G.C.A. ch. 48, notice-content requirements)	Scan
`GU-GCA-48-INV` Personal-Information System Inventory	Agencies, businesses and organizations responsible for breach response must be able to account for the systems and software holding protected personal information (9 G.C.A. § 48.10 et seq., covered-entity responsibilities)	Scan
`GU-GCA-48-SAFE` Protection of Stored Personal Data	The law's protection of financial credentials and identifiers rewards verifiable integrity controls on the components that store and transmit them (9 G.C.A. ch. 48, protected personal-information definitions)	Scan

All 22 from the standard set, adapted to GU Data Law.