Mauritania Law 2017-020 on Data Protection
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | MR Law 2017 |
| Region | Middle East & Africa |
| Country or scope | Mauritania |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers MR Law 2017
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
MR-020-SEC Security of Personal Data | Controllers must protect personal data during collection, recording, processing, storage, and transmission; verifiable integrity hashes on processing components evidence these safeguards (Law 2017-020, security obligations) | Scan |
MR-020-ACC Adequate, Relevant, Accurate Data | Data processed must be adequate, relevant, not excessive, and accurate, presuming each processing component is fully identified by both name and a concrete version (Law 2017-020, data-quality principles) | Scan |
MR-020-DECL Formalities Before the APD | Processing operations are subject to declaration or authorization formalities before the Personal Data Protection Authority, requiring an enumerable, named record of the software performing the processing (Law 2017-020, prior-formalities provisions) | Scan |
MR-020-PROC Processor Accountability | Processing carried out through third parties must remain under the controller's responsibility, so third-party software components must carry named, accountable suppliers (Law 2017-020, processor provisions) | Scan |
MR-020-RET Retention Limitation | Personal data may be retained only as long as necessary for its declared purposes, which requires knowing exactly which software components, at which versions, hold the data (Law 2017-020, retention-limitation principle) | Scan |
MR-020-TRANS Transparent and Fair Processing | Collection and processing must be lawful, fair, and non-fraudulent, presupposing documented, uniquely identified and timestamped records of the processing environment (Law 2017-020, fair-processing principles) | Scan |
Policy templates
All 22 from the standard set, adapted to MR Law 2017.
Mali Law No. 2013-015 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Mauritius Data Protection Act 2017
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.