Holy See Data Protection Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | VA DP Frwk |
| Region | Europe |
| Country or scope | Holy See (Vatican) |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers VA DP Frwk
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
VA-GRPD-IC Integrity and Confidentiality Principle | Personal data must be processed in a manner ensuring its integrity and confidentiality against unauthorized access or alteration; verifiable integrity hashes on processing components evidence this principle (General Regulation 2024, integrity-and-confidentiality principle) | Scan |
VA-GRPD-ACC Accuracy Principle | Processed personal data must be accurate and kept up to date, which presumes the software performing the processing is fully identified by name and concrete version (General Regulation 2024, accuracy principle) | Scan |
VA-GRPD-TRANS Transparency of Processing | Processing must be transparent to data subjects, presupposing documented, uniquely identified and timestamped records of the processing environment (General Regulation 2024, transparency principle) | Scan |
VA-GRPD-MIN Purpose Limitation and Minimisation | Processing requires a legitimate purpose and must be limited and proportionate, which requires knowing precisely which software components take part in the processing (General Regulation 2024, purpose-limitation and data-minimisation principles) | Scan |
VA-GRPD-RESP Accountable Processing Parties | Processing must be attributable to responsible parties operating under the controller's authority, so third-party software components must carry named, accountable suppliers (General Regulation 2024, controller-responsibility provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to VA DP Frwk.
Guernsey Data Protection Law 2017
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Hungary Act CXII of 2011 (Infotv)
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.