Eswatini Data Protection Act 2022
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | SZ DPA |
| Region | Middle East & Africa |
| Country or scope | Eswatini |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SZ DPA
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SZ-DPA-SEC Security Safeguards | Data controllers must implement security measures preventing unauthorized access, loss or misuse of personal data, presuming verifiable integrity of the software components in the processing stack (Data Protection Act 2022, security-safeguards obligation) | Scan |
SZ-DPA-BREACH 72-Hour Breach Notification Readiness | Personal data breaches must be reported within 72 hours of awareness; assessing scope that quickly requires precisely identifiable components (PURL/CPE) in the systems that process personal data (Data Protection Act 2022, breach-notification obligation) | Scan |
SZ-DPA-PROC Processor Obligations | The Act binds processors as well as controllers, wherever domiciled, requiring the third-party suppliers of processing software and services to be identified and accountable (Data Protection Act 2022, controller-processor obligations) | Scan |
SZ-DPA-REC Accountable Records of Processing | Accountability to the Commission presupposes that the organization can enumerate the systems and software components used to process personal data (Data Protection Act 2022, accountability obligations) | Scan |
SZ-DPA-QUAL Complete and Accurate Records | Data must be collected for explicit purposes and kept accurate; applied to the processing stack, each component should carry both a name and a version so the record is complete (Data Protection Act 2022, data-quality principle) | Scan |
SZ-DPA-DOC Dated, Identifiable Documentation | Demonstrating compliance to the Commission requires dated, identifiable documentation of processing systems, satisfied by an SBOM with a document ID and creation timestamp (Data Protection Act 2022, accountability principle) | Scan |
Policy templates
All 22 from the standard set, adapted to SZ DPA.
Egypt PDPL (Law 151/2020)
Egypt Personal Data Protection Law - licensing, DPO, data subject rights, cross-border transfers.
Ethiopia Personal Data Protection Proclamation 1321/2024
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.