Publication and control record
This record identifies the current version, publication status, ownership, approval and implementation position of this standard.
Purpose of this standard
To establish a consistent framework for protecting personal data throughout its collection, use, storage, disclosure, retention and deletion within MANIDASO-controlled activities.
Scope
This section defines the operational boundaries, platform components, routes and markets to which this standard applies.
This standard applies to personal data processed through official MANIDASO services, platform records, verification processes, transaction administration, communications and associated governance activities. It applies to data relating to participants, representatives, personnel and other identifiable individuals whose information is processed in connection with MANIDASO activity.
Principles
The principles governing the interpretation, application and operation of this standard.
Definitions
Terms used within this standard that require a defined meaning for consistent interpretation and application.
Standard requirements
Mandatory and conditional requirements established under this standard.
Control framework
Control activities supporting the implementation, monitoring and assurance of this standard.
Responsibilities and accountability
Roles, responsibilities and authorities relevant to the implementation, operation and oversight of this standard.
Evidence and records
Evidence and records required to demonstrate implementation, compliance and effective operation of this standard.
Exceptions and approved departures
Any departure from this standard must be identified, assessed, authorised and recorded in accordance with the applicable governance process.
Any departure from approved data-protection controls must be documented, justified and authorised through the applicable governance process before implementation, unless immediate action is required to prevent material harm or legal breach.
Compliance and non-compliance
Compliance with this standard is required within its defined scope. Identified non-compliance must be assessed, recorded and addressed through the applicable governance process.
Suspected unauthorised processing, disclosure, loss, alteration or misuse of personal data must be recorded, assessed and escalated in accordance with the applicable incident and governance procedures.
Escalation stages apply where non-compliance is material, repeated, unresolved or otherwise requires governance intervention.
External references and authorities
External legislation, regulatory guidance, recognised standards and other authoritative sources relevant to this standard.
Revision history
A chronological record of revisions, amendments and publication updates to this standard.
Questions and enquiries
Questions relating to the interpretation, application or implementation of this standard should be submitted through the official MANIDASO governance contact channels.
