Mongolia Law on Personal Data Protection 2021

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	MN PDPL
Region	Asia-Pacific
Country or scope	Mongolia
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers MN PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`MN-PDPL-SEC` Security of Personal Data Processing	Data controllers must take technical and organisational measures to protect personal data from loss, unauthorised access and alteration, evidenced by integrity hashes on processing-system components (Law on Personal Data Protection 2021, controller security obligations)	Scan
`MN-PDPL-INV` Processing System Inventory	Controllers are accountable for all collection and processing of personal data, which presupposes an inventory of the software systems performing that processing (Law on Personal Data Protection 2021, controller accountability duties)	Scan
`MN-PDPL-3P` Authorised Processor Oversight	Processing performed by other persons on the controller's behalf must be authorised and supervised, so third-party software components must have named suppliers (Law on Personal Data Protection 2021, provisions on processing by third parties)	Scan
`MN-PDPL-BRN` Breach Response Readiness	Controllers must respond to and report violations of data security, which requires components to be identifiable so breach impact can be scoped (Law on Personal Data Protection 2021, breach response and notification duties)	Scan
`MN-PDPL-VER` Known Software Versions	Keeping personal data accurate and secure over time requires knowing the exact versions of the software components in use (Law on Personal Data Protection 2021, data quality and security provisions)	Scan

All 22 from the standard set, adapted to MN PDPL.