Nepal Individual Privacy Act 2018
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | NP Privacy |
| Region | Asia-Pacific |
| Country or scope | Nepal |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers NP Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
NP-IPA-PROT Protection of Stored Personal Information | Bodies holding personal information must keep it secure and prevent unauthorised access or alteration, evidenced by integrity hashes on data-processing software components (Individual Privacy Act 2018, protection-of-personal-information duty, Chapter on personal information) | Scan |
NP-IPA-INV Records of Information Systems | Responsible collection and safe storage of personal information presupposes that the organisation maintains an inventory of the software systems in which such information resides (Individual Privacy Act 2018, collection and storage obligations) | Scan |
NP-IPA-3P Third-Party Disclosure Control | Personal information may not be provided to or used by third parties without consent, so third-party software handling such data must have identifiable, named suppliers (Individual Privacy Act 2018, restrictions on disclosure to third parties) | Scan |
NP-IPA-VER Misuse-Response Readiness | Liability for unauthorised use or leakage of personal information requires operators to know exactly which software versions they run so incidents can be traced and remedied (Individual Privacy Act 2018, offences and compensation provisions) | Scan |
NP-IPA-DOC Traceable Records | Accountable handling of personal information requires records about processing systems to be identifiable documents with a creation timestamp (Individual Privacy Act 2018, record-keeping duties of public bodies) | Scan |
Policy templates
All 22 from the standard set, adapted to NP Privacy.
Nauru National ICT / Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
New Caledonia Loi Informatique et Libertes
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.