Law / Frameworks / NIST Privacy Framework / Protect-P
NIST Privacy Framework, Protect-PPR.AC-P2
Physical access to data and devices is managed.NIST Privacy Framework, version 1.0, January 2020, PR.AC-P2
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Corpus as of .
- 4
- laws
- 4
- places
- 0
- with court rulings behind them
- 0
- not yet in force
Comprehensive regime
2 laws, 2 places| Place | Law | What it asks, as read here |
|---|---|---|
 Côte d'Ivoire |
Law No. 2013-450 on the Protection of Personal Data |
Prevent unauthorized access to the installations and data used for processing, guard against the processing being used for money laundering or terrorist financing, and keep backup copies for security. |
 Tunisia |
Organic Act on the Protection of Personal Data |
Take all necessary precautions to secure personal data against unauthorized modification, alteration or consultation, including physical access controls, a log of who accessed the system and when, and secure backup copies. |
Biometric privacy
1 law, 1 place| Place | Law | What it asks, as read here |
|---|---|---|
 Vietnam |
Law on Personal Data Protection, biometric and location data protection |
An app that collects or processes biometric data, meaning physical attributes and unique, stable biological characteristics used to identify a person, from an individual in Vietnam must apply physical security measures, limit access, and maintain a monitoring system to detect infringement, and is liable for damage its processing causes. |
Sensitive categories
1 law, 1 place| Place | Law | What it asks, as read here |
|---|---|---|
 Cabo Verde |
Law No. 133/V/2001 on the Protection of Personal Data, sensitive data categories |
Take the listed special security measures for sensitive, credit and solvency, and criminal record data, including controlling entry to processing premises, controlling who can read, copy, alter or transmit the data, and logically separating health and sex life data, including genetic data, from other personal data. |
Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.