Togo Law No. 2019-014 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	TG PDPL
Region	Middle East & Africa
Country or scope	Togo
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers TG PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`TG-PDPL-SEC` Security of Processing	Controllers must implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration and unauthorised access, evidenced by integrity hashes on processing components (Law No. 2019-014, security-of-processing obligations)	Scan
`TG-PDPL-DECL` Processing Formalities and Inventory	Processing is subject to formalities before the IPDCP, which presupposes an inventory of the software systems used to process personal data (Law No. 2019-014, prior-formalities and accountability provisions)	Scan
`TG-PDPL-PROC` Processor Guarantees	Processing on behalf of a controller must be governed by contract with sufficient security guarantees, so third-party software components must have named suppliers (Law No. 2019-014, controller-processor provisions)	Scan
`TG-PDPL-ID` Identifiable Components	Confidentiality duties and incident investigation require the components of processing systems to be uniquely identifiable via PURL or CPE (Law No. 2019-014, confidentiality and enforcement provisions)	Scan
`TG-PDPL-DOC` Traceable Documentation	Demonstrating conformity to the supervisory authority requires software records to be identifiable, timestamped documents (Law No. 2019-014, supervisory cooperation duties)	Scan

All 22 from the standard set, adapted to TG PDPL.