Law No. 133/V/2001 on the Protection of Personal Data, nature of the supervisory authority
In force since .
An enforcement supervision rule binding public and private bodies.
- Enforcement body
- Comissão Nacional de Protecção de Dados (CNPD)
- Obligation class
- Governance
As of .
What it requires
- Submit to supervision by the CNPD, the independent administrative authority that oversees personal data protection under this law and operates within the National Assembly.
These lines are LexLint's reading of the law's text, as of .
In the frameworks
- NIST Privacy Framework
- GV.PO-P5Legal, regulatory, and contractual requirements regarding privacy are understood and managed.
- FINOS AIGF
- AIR-PREV-005System Acceptance Testing
- AIR-PREV-006Data Quality & Classification/Sensitivity
- AIR-PREV-024Human-in-the-Loop Action Approval Gate
- AIR-DET-004AI System Observability
- AIR-DET-011Human Feedback Loop for AI Systems
- AIR-DET-021Agent Decision Audit and Explainability
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What this law does
Article 38 establishes the CNPD as an independent administrative authority operating within the National Assembly. Lei n.º 41/VIII/2013 gave the provision, then numbered Article 22, this wording. Lei n.º 41/VIII/2013 entered into force thirty days after its publication. The act appears in the Boletim Oficial da República de Cabo Verde, I Série, n.º 48, of .
When LexLint raises it
When your app profile says your app crawls the web, trains models, deploys a chatbot, sends automated outreach, makes high-risk automated decisions or is a listed company.