Jamaica
ModerateData Protection Act 2020
Authority: Office of the Information Commissioner | Enforcement: partial | Enacted: December 2023
Overview
Jamaica enacted the Data Protection Act in 2020, which became fully operational in December 2023. The Office of the Information Commissioner oversees compliance. The law provides for data subject rights, consent, and cross-border transfers.
14-Topic Coverage
Data Protection Authority
Fully AddressedInformation Commissioner oversees data protection enforcement.
Consent Requirements
Fully AddressedConsent required as primary basis. Must be free, specific, and informed.
Data Subject Rights
Fully AddressedRights to access, correction, and erasure.
Cross-Border Transfer
Fully AddressedTransfers to countries with adequate protection.
Breach Notification
Fully AddressedMust notify the Commissioner and affected data subjects.
DPO Requirements
Partially AddressedMust register with the Commissioner. No formal DPO role.
Children's Data
Partially AddressedGeneral provisions apply. Child Care and Protection Act provides additional protections.
Penalties & Enforcement
Fully AddressedFines up to JMD 2 million and/or imprisonment up to 3 years.
Sector-Specific Rules
Partially AddressedBOJ financial data guidance, health data regulations.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedAct applies to government. National security exemptions.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Jamaica's regulations.
Book a Consultation