{
  "node_id": "ls-dpa-2012",
  "title": "Lesotho Data Protection Act 2012",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "Lesotho enacted the Data Protection Act 2012 to regulate the processing of personal data in the Kingdom of Lesotho. The Lesotho Communications Authority (LCA) functions as the interim supervisory body pending establishment of a dedicated Data Protection Commissioner. The Act establishes data protection principles including lawful and fair collection, purpose limitation, data minimisation, accuracy, retention limits, security safeguards, and individual participation rights. Data subjects have rights of access and correction. Cross-border transfers are restricted to jurisdictions with comparable protection. Sensitive personal information categories require heightened conditions. The Act aligns with the Southern African Development Community (SADC) data protection standards.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/ls-dpa-2012.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}