O5.9 Assess existence of comprehensive data protection laws to protect personal data

Principle

O5 Ensure data protection during use

Risks

SV2 Weak rule of law, RS1 Privacy vulnaerability

Life Cycle Stages

Conception and Scoping

Practices

• Implement legal safeguards that outline the lawful processing, retention, and protection of personal data and protect against overreaching information requests from third parties, including government agencies.