Yemen National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | YE Privacy |
| Region | Middle East & Africa |
| Country or scope | Yemen |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers YE Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
YE-CONST-COMM Sanctity of Communications | The Constitution guarantees the sanctity and confidentiality of correspondence and communications, requiring verifiable integrity of the software components that carry or process them (Constitution of Yemen, Arts. 52-53 communications-privacy guarantees) | Scan |
YE-TEL-CONF Telecommunications Confidentiality | Confidentiality of communications must be ensured by service operators under the Telecommunications Law, so the software components they deploy must carry named, accountable suppliers (Yemen Telecommunications Law, confidentiality provisions) | Scan |
YE-DP-INV Knowledge of Processing Assets | Protecting communications and personal information presupposes an enumerable, named inventory of the software components involved in handling it (constitutional privacy guarantees, applied to processing systems) | Scan |
YE-DP-ID Breach-Impact Readiness | Assessing any compromise of private communications requires that the components handling them are identifiable via standard identifiers (constitutional privacy guarantees, applied to incident assessment) | Scan |
YE-DP-DOC Documented Processing Environment | Demonstrating respect for privacy guarantees presupposes documented, uniquely identified and timestamped records of the processing environment (constitutional privacy guarantees, applied to documentation) | Scan |
Policy templates
All 22 from the standard set, adapted to YE Privacy.
Uganda Data Protection and Privacy Act 2019
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Zambia Cyber Security and Cyber Crimes Act 2021
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.