Gabon Law No. 001/2011 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | GA PDPL |
| Region | Middle East & Africa |
| Country or scope | Gabon |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers GA PDPL
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
GA-PDPL-SEC Security and Confidentiality of Processing | Controllers must take technical precautions to protect personal data against accidental or unlawful destruction, loss, alteration and unauthorized access, which presumes integrity controls over the processing software itself (Law No. 001/2011, security-of-processing obligation) | Scan |
GA-PDPL-DECL Prior Declaration of Processing | Processing operations must be declared to the CNPDCP before they begin, which requires the controller to know and enumerate the software systems and components that process personal data (Law No. 001/2011, prior-declaration regime) | Scan |
GA-PDPL-PROC Processor Guarantees | Where processing is outsourced, the controller must choose a processor providing sufficient guarantees of security and confidentiality, requiring third-party software suppliers to be identified and vetted (Law No. 001/2011, processor-oversight obligation) | Scan |
GA-PDPL-QUAL Data Quality and Currency | Personal data must be accurate, complete and kept up to date, which for processing systems means knowing the exact versions of the software in use so stale or unmaintained components can be identified (Law No. 001/2011, data-quality principle) | Scan |
GA-PDPL-DOC Documented Processing Records | The declaration regime and CNPDCP oversight presuppose auditable, dated documentation of the systems that process personal data, satisfied by an SBOM with a document identifier and creation timestamp (Law No. 001/2011, accountability to the CNPDCP) | Scan |
Policy templates
All 22 from the standard set, adapted to GA PDPL.
Ethiopia Personal Data Protection Proclamation 1321/2024
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Ghana Data Protection Act
Ghana Data Protection Act - DPC registration, data subject rights, consent, security safeguards.