Compliance FrameworksEurope
Faroe Islands Data Protection Act
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | FO DP Act |
| Region | Europe |
| Country or scope | Faroe Islands |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance โบ Manage. |
How Safeguard covers FO DP Act
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
FO-DPA-SEC Security of Processing | Entities must implement technical and organisational measures appropriate to processing risk, including the ability to verify the integrity of processing software (Act No. 80 of 7 June 2020, GDPR Art. 32-style security obligation) | Scan |
FO-DPA-PRIN Integrity and Confidentiality Principle | Personal data must be processed securely and kept accurate, presupposing fully described processing components with name and version (Act No. 80 of 7 June 2020, data-protection principles) | Scan |
FO-DPA-REC Records of Processing | Controllers and processors must maintain records of their processing activities, including a named, populated inventory of processing systems (Act No. 80 of 7 June 2020, GDPR Art. 30-style record duty) | Scan |
FO-DPA-PROC Processor Guarantees | Controllers may only engage processors giving sufficient guarantees of compliant processing, requiring supplier visibility for third-party components (Act No. 80 of 7 June 2020, GDPR Art. 28-style processor obligation) | Scan |
FO-DPA-BRE Breach Notification Readiness | Breach-notification duties to the Data Protection Authority require identifying exactly which software components an incident affected (Act No. 80 of 7 June 2020, GDPR Art. 33-style breach notification) | Scan |
Policy templates
All 22 from the standard set, adapted to FO DP Act.