Compliance FrameworksMiddle East & Africa
Niger Law No. 2017-28 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | NE PDPL |
| Region | Middle East & Africa |
| Country or scope | Niger |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers NE PDPL
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
NE-PDPL-SEC Technical and Organizational Security Measures | Controllers must implement all appropriate technical and organizational measures to preserve security and confidentiality, protecting data against accidental or unlawful destruction, loss, alteration, distribution or access, presuming integrity controls on processing software (Law No. 2017-28, security-of-processing obligation) | Scan |
NE-PDPL-DECL Prior Formalities with the HAPDP | Processing operations are subject to prior declaration to, or authorization by, the HAPDP, which presupposes an inventory of the software systems and components performing the processing (Law No. 2017-28, declaration/authorization regime) | Scan |
NE-PDPL-PROC Processor and Subcontractor Duties | Persons processing data on behalf of the controller are bound by the same security and confidentiality duties, requiring the third-party suppliers involved in processing systems to be identified (Law No. 2017-28, processor obligation) | Scan |
NE-PDPL-INFO Transparency Toward Data Subjects | Data subjects must be informed of the identity of the controller, the categories of data collected and the purposes of processing; verifiable documentation of the processing system supports this duty (Law No. 2017-28, information rights) | Scan |
NE-PDPL-QUAL Data Quality and Maintained Systems | Data must be accurate and kept up to date, which applied to the processing stack requires component versions to be recorded so unmaintained software is detectable (Law No. 2017-28, data-quality principle) | Scan |
Policy templates
All 22 from the standard set, adapted to NE PDPL.