Senegal Law No. 2008-12 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	SN PDPL
Region	Middle East & Africa
Country or scope	Senegal
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers SN PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`SN-PDPL-70` Security Obligation	The controller must take every useful precaution, given the nature of the data and the risks of processing, to preserve data security and prevent alteration, damage or unauthorised access, evidenced by integrity hashes on processing components (Law No. 2008-12, Art. 70 security obligation)	Scan
`SN-PDPL-DECL` Declaration of Processing	Processing of personal data requires prior declaration to or authorisation by the CDP, which presupposes an inventory of the software systems performing the processing (Law No. 2008-12, prior-formalities regime)	Scan
`SN-PDPL-PROC` Subcontractor Guarantees	Data processing entrusted to a subcontractor must be governed by contract and offer sufficient guarantees of security, so third-party software components must have named suppliers (Law No. 2008-12, subcontracting provisions)	Scan
`SN-PDPL-CONF` Confidentiality and Access Control	Only authorised persons may access personal data, which requires the components of processing systems to be uniquely identifiable so access paths can be controlled and audited (Law No. 2008-12, confidentiality obligations)	Scan
`SN-PDPL-DOC` Traceable Documentation	Demonstrating conformity to the CDP requires software records to be identifiable, timestamped documents (Law No. 2008-12, supervisory cooperation duties)	Scan

All 22 from the standard set, adapted to SN PDPL.