Compliance FrameworksAsia-Pacific
Laos Law on Electronic Data Protection 2017
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | LA EDPL |
| Region | Asia-Pacific |
| Country or scope | Laos |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers LA EDPL
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
LA-EDPL-SEC Electronic Data Security Measures | Data managers must apply technical measures to keep electronic data safe from unauthorised access, alteration or destruction, evidenced by integrity hashes on system components (Law No. 25/NA on Electronic Data Protection 2017, data-security obligations) | Scan |
LA-EDPL-CLS Data and System Classification | Classifying electronic data as general or specific and managing it accordingly requires an inventory of the software components that store and process it (Law No. 25/NA 2017, data classification and management provisions) | Scan |
LA-EDPL-ACC Accuracy and Completeness of Data Records | Electronic data must be kept accurate and complete, which extends to system records where every component carries both a name and a version (Law No. 25/NA 2017, data accuracy and storage duties) | Scan |
LA-EDPL-3P Third-Party Data Handling | Disclosure of electronic data to third parties is restricted and third-party handlers bear duties, so third-party software components should have named suppliers (Law No. 25/NA 2017, obligations of data users and third parties) | Scan |
LA-EDPL-DOC Traceable System Documentation | Managing electronic data under state supervision requires system documentation that is itself identifiable, with a document ID and creation timestamp (Law No. 25/NA 2017, data-management and reporting duties) | Scan |
Policy templates
All 22 from the standard set, adapted to LA EDPL.