77 controls / 191 specifications; mandatory for government entities.
Key provisions
PDP.1 — Plan. Personal Data Protection domain, control PDP.1 — the PDP plan. NDMO DM & PDP Standards: 15 domains → 77 controls → 191 specifications; codes are PDP.x (control) / PDP.x.x (specification), e.g. PDP.1.1. (No 'CS'/'MQ' infix exists.)
PDP.2 — Training and Awareness. Personal Data Protection domain, control PDP.2 — training and awareness.
PDP.3 — Data Breach. Personal Data Protection domain, control PDP.3 — data-breach detection, logging and notification to the regulator.
PDP.4 — Data Lifecycle Management. Personal Data Protection domain, control PDP.4 — data lifecycle management; its specifications include risk-assessment findings (PDP.4.3) and monitoring (PDP.4.4).
PDP.5 — Artifacts. Personal Data Protection domain, control PDP.5 — artifacts (records and registers).