Compliance FrameworksAsia-Pacific
Timor-Leste National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | TL Privacy |
| Region | Asia-Pacific |
| Country or scope | Timor-Leste |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers TL Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
TL-C38-REC Accurate Records of Data-Processing Software | The constitutional right to know and correct data held about oneself presupposes an accurate, maintained record of the software components that store and process personal records (Constitution 2002, s. 38). | Scan |
TL-C38-ACC Identifiable Data-Holding Components | Giving effect to access and rectification rights requires knowing precisely which components hold personal data, so components should carry standard identifiers such as PURL or CPE (Constitution 2002, s. 38). | Scan |
TL-C36-SEC Integrity of Personal-Data Systems | Protecting personal data and private life from interference requires that data-handling components be verifiable against tampering via integrity hashes (Constitution 2002, ss. 36 and 38 privacy and data-protection guarantees). | Scan |
TL-C38-VER Version Records for Exposure Assessment | Assessing whether personal records have been exposed or misused requires knowing the versions of the software in operation (Constitution 2002, s. 38-derived safeguard duty). | Scan |
TL-ICT-DOC Documented Processing Systems | Demonstrating that constitutional data-protection duties are met requires dated, identifiable documentation of the systems used to process personal records (Constitution 2002, s. 38; state ICT policy). | Scan |
Policy templates
All 22 from the standard set, adapted to TL Privacy.