Compliance FrameworksEurope
Bosnia and Herzegovina Law on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | BA LPDP |
| Region | Europe |
| Country or scope | Bosnia and Herzegovina |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers BA LPDP
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
BA-LPDP-11 Data Security Measures | Controllers and processors must undertake measures against accidental or unauthorized destruction, alteration and access to personal data; verifiable integrity hashes on processing components evidence tamper protection (BiH LPDP Art. 11 data-security obligation) | Scan |
BA-LPDP-PLAN Data Security Plan | Controllers must adopt a security plan describing the technical measures protecting personal data, supported by a formally identified, timestamped record of the software in scope (BiH LPDP security-plan obligation) | Scan |
BA-LPDP-REC Records of Data Filing Systems | Controllers must establish and maintain records of the personal data filing systems they keep, which presupposes an inventory of the software components operating those systems (BiH LPDP records provisions) | Scan |
BA-LPDP-PROC Processing on Behalf of Controllers | Entrusting processing to a processor requires a contract guaranteeing equivalent protection measures, which requires knowing the suppliers behind the processing software (BiH LPDP processor provisions) | Scan |
BA-LPDP-VER Maintained Protection Level | Security measures must remain adequate over time, which requires knowing exact component versions so that weaknesses in deployed software can be assessed (BiH LPDP Art. 11 ongoing-security duty) | Scan |
Policy templates
All 22 from the standard set, adapted to BA LPDP.