77 controls / 191 specifications; mandatory for government entities.
Key provisions
PDP.1: Plan. Personal Data Protection domain, control PDP.1, and the PDP plan. NDMO DM & PDP Standards: 15 domains → 77 controls → 191 specifications; codes are PDP.x (control) / PDP.x.x (specification), e.g. PDP.1.1. (No 'CS'/'MQ' infix exists.)
PDP.2: Training and Awareness. Personal Data Protection domain, control PDP.2, training and awareness.
PDP.3: Data Breach. Personal Data Protection domain, control PDP.3, data-breach detection, logging and notification to the regulator.
PDP.4: Data Lifecycle Management. Personal Data Protection domain, control PDP.4, data lifecycle management; its specifications include risk-assessment findings (PDP.4.3) and monitoring (PDP.4.4).
PDP.5: Artifacts. Personal Data Protection domain, control PDP.5, artifacts (records and registers).