Safeguard Docs
Compliance FrameworksMiddle East & Africa

DR Congo Digital Code 2023 (Personal Data)

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.

Short nameCD Digital
RegionMiddle East & Africa
Country or scopeDR Congo
SectorPrivacy
In your workspaceOff until you switch it on in Compliance โ€บ Manage.

How Safeguard covers CD Digital

  • Scan requirements: 5, all decided by a scan.
  • Controls: the scan requirements below.
  • Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
  • Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

RequirementWhat Safeguard checksDecided by
CD-DC-SEC Security of Personal Data ProcessingControllers must protect personal data through technical and organizational measures against unauthorized access, alteration or destruction, presuming verifiable integrity of the software components that process the data (Ordinance-Law No. 23/010, personal-data provisions, Title III)Scan
CD-DC-INV Data Governance and Processing InventoryThe Code's data-governance regime and supervisory-authority oversight presuppose that organizations can enumerate the systems and software components that process personal data (Ordinance-Law No. 23/010, data-governance provisions)Scan
CD-DC-PROC Platform and Third-Party AccountabilityThe Code regulates digital platforms and processing performed by third parties, requiring the external suppliers of processing software and services to be identified and accountable (Ordinance-Law No. 23/010, platform and processor provisions)Scan
CD-DC-CYBER Cybersecurity Hygiene of Digital SystemsThe Code's cybersecurity chapter obliges operators of digital systems to keep them secure against interference and misuse, which requires known component versions so vulnerable software can be patched (Ordinance-Law No. 23/010, cybersecurity provisions)Scan
CD-DC-DOC Documented, Dated System RecordsAccountability to the future data-protection supervisory authority requires dated and identifiable documentation of processing systems, satisfied by an SBOM with document ID and creation timestamp (Ordinance-Law No. 23/010, accountability provisions)Scan

Policy templates

All 22 from the standard set, adapted to CD Digital.

On this page