Trinidad and Tobago
ModerateData Protection Act 2011
Authority: Office of the Information Commissioner | Enforcement: partial | Enacted: November 2012
Overview
Trinidad and Tobago enacted the Data Protection Act in 2011, though not all provisions have been proclaimed. The Office of the Information Commissioner oversees compliance. The framework covers consent and data subject rights but enforcement is limited.
14-Topic Coverage
Data Protection Authority
Fully AddressedInformation Commissioner oversees data protection alongside freedom of information.
Consent Requirements
Fully AddressedConsent required. Must be freely given and specific.
Data Subject Rights
Fully AddressedRights to access, correction, and blocking.
Cross-Border Transfer
Partially AddressedProvisions exist but not fully proclaimed. Adequate protection required.
Breach Notification
Partially AddressedLimited provisions. Not fully in force.
DPO Requirements
Not AddressedNo formal DPO requirement.
Children's Data
Partially AddressedGeneral provisions apply. Children Act provides additional protections.
Penalties & Enforcement
Partially AddressedFines and penalties defined but enforcement limited due to partial proclamation.
Sector-Specific Rules
Partially AddressedCBTT financial data guidance.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedAct applies to government but not fully enforced.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Trinidad and Tobago's regulations.
Book a Consultation