Tonga National ICT / Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | TO Privacy |
| Region | Asia-Pacific |
| Country or scope | Tonga |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers TO Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
TO-CCA-INT Protection Against Data Interference | The computer-crime regime protects data and systems from unauthorised alteration or damage, so components should carry integrity hashes that let tampering be detected (Computer Crimes Act 2003, data- and system-interference offences). | Scan |
TO-CCA-VER Version Records for Intrusion Response | Investigating unauthorised access to computer systems requires knowing the versions of the software in operation (Computer Crimes Act 2003, illegal-access offence). | Scan |
TO-COM-3P Third-Party Service Accountability | Licensed communications operators remain answerable for services delivered through third parties, so third-party components should have named suppliers (Communications Act 2015, licensing and confidentiality duties). | Scan |
TO-ICT-REC Inventory of Communications Software | Meeting confidentiality duties over customer communications presupposes an inventory of the software components handling them (Communications Act 2015; national ICT policy). | Scan |
TO-ICT-DOC Documented System Records | Demonstrating compliance with computer-security and confidentiality duties requires dated, identifiable documentation of the systems operated (Computer Crimes Act 2003; Communications Act 2015). | Scan |
Policy templates
All 22 from the standard set, adapted to TO Privacy.
Timor-Leste National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Turkmenistan Law on Information about Private Life
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.