Data protection
The Data Protection Act 2020 follows the GDPR structure with eight standards, enforced by the Information Commissioner.
Protection rests on the Data Protection Act 2020, brought into operation with a transition period ending in 2023, and enforced by the Information Commissioner. The Act follows the GDPR structure closely, with eight standards and registration of data controllers.
Key points
| Phased implementation | Obligations were brought into force in stages |
|---|---|
| Data protection officer | Required for certain organisations |
| Offences | Unlawful obtaining and disclosure are offences |
In practice
- Check which obligations were in force when your incident occurred.
- Complain to the Office of the Information Commissioner in writing.
Worth knowing
Because the Act was phased in, the obligations that applied depend on the date. Establish that before framing the complaint.
The general article: Data protection · Compare with another country
Privacy
The Charter of Fundamental Rights and Freedoms, added to the Constitution in 2011, guarantees respect for private and family life and for privacy of the home and of communications. The Data Protection Act 2020 established the Office of the Information Commissioner, with obligations phased in to give organisations time to comply.
Jamaica's Charter of Fundamental Rights and Freedoms protects privacy of the home, of communications and of family life, and the Data Protection Act of 2020 introduced a comprehensive regime with an Information Commissioner, registration of data controllers and standards modelled on the European framework. Compliance obligations have been phased in, and the Cybercrimes Act covers malicious communications.
Key points
| Constitution | Charter of Fundamental Rights and Freedoms, section 13(3)(j) |
|---|---|
| Statute | Data Protection Act 2020 |
| Regulator | Office of the Information Commissioner |
| Registration | Data controllers must register |
| Individual rights | Access, correction, prevention of processing for direct marketing |
| Remedy | Complaint to the Commissioner; constitutional redress in the Supreme Court |
| Constitutional redress | Available in the Supreme Court for breach of the Charter |
| Phased duties | Obligations came into force in stages |
In practice
- Establish which obligations were in force at the relevant date before framing a complaint.
Where to go
- Supreme Court constitutional redress.
- Legal Aid Council.
Worth knowing
The Act's obligations were phased in: for older incidents, check which provisions were in force at the time. The Charter right is directly enforceable, which gives a route even where the statutory obligations were not yet in force.
Frequently asked questions
Who enforces data protection in Jamaica?
The Office of the Information Commissioner, established under the Data Protection Act, which registers data controllers, investigates complaints and can impose penalties. Individuals have rights of access, correction and objection, exercised first with the organisation and then by complaint.
Image rights
The Cybercrimes Act 2015 criminalises the use of a computer to send data that is obscene, threatening or menacing with intent to harass. Related offences under the Sexual Offences Act and the Child Pornography (Prevention) Act apply where the material is sexual or involves a minor, and the Data Protection Act 2020 covers identifiable images.
Key points
| Statute | Cybercrimes Act 2015, malicious communication offences |
|---|---|
| Sexual material | Sexual Offences Act and Child Pornography (Prevention) Act |
| Data protection | Data Protection Act 2020 |
| Constitution | Charter of Fundamental Rights and Freedoms |
| Reporting | JCF Communication Forensics and Cybercrime Division |
| Civil route | Claim for breach of confidence and constitutional redress |
| Intent to harass | The malicious communication offence requires it, which shapes the evidence needed |
| Children | Separate and far more serious offences apply |
In practice
- Gather evidence of the sender's intent: messages, threats and prior conduct.
Where to go
- JCF Communication Forensics and Cybercrime Division.
- Office of the Children's Advocate where a minor is involved.
- Legal Aid Council.
Worth knowing
Jamaica has no statute dedicated to non-consensual intimate imagery between adults: cases are built on the malicious communication offence, so evidence of intent to harass matters. Because the offence requires intent to harass, surrounding messages often matter more than the image itself. Preserve the whole exchange.
The general article: Image rights · Compare with another country
Speech and online harassment
The Cybercrimes Act covers malicious online communications, and the Defamation Act 2013 removed criminal libel.
The framework rests on the Cybercrimes Act, which covers malicious online communications, and the Defamation Act 2013, which abolished the distinction between libel and slander and removed criminal libel. The 2013 Act also shortened the limitation period and introduced an offer of amends procedure.
Key points
| Defamation Act 2013 | Abolished the distinction between libel and slander and removed criminal libel |
|---|---|
| Limitation | Two years for defamation claims |
| Cybercrimes Act | Malicious communication offences |
| Offer of amends | A statutory procedure that limits damages if accepted |
In practice
- Send a letter before action; an offer of amends can resolve the matter quickly.
- Preserve the publication and evidence of circulation.
Recent changes
The Inter-American Commission on Human Rights holds that the reputation of public officials should be protected only through civil sanctions (Declaration of Principles on Freedom of Expression, 2000); with the Defamation Act 2013, Jamaica became the first independent Caribbean country with no criminal defamation law, and Trinidad and Tobago partly followed in 2014.
Where to go
- Jamaica Constabulary Force Cybercrimes Unit.
- Office of the Information Commissioner for data-related complaints.
- Bureau of Gender Affairs for gender-based online abuse.
Worth knowing
The 2013 Act abolished criminal libel and introduced the offer of amends. Both changes made defamation in Jamaica closer to the modern English model.
The general article: Speech and online harassment · Compare with another country
Copyright
The Copyright Act 1993 was amended in 2015 to extend the term of protection from fifty to ninety-five years after the author's death, one of the longest terms anywhere. The extension was driven by the value of Jamaica's music catalogue.
Key points
| Statute | Copyright Act 1993, amended in 2015 |
|---|---|
| Term | 95 years after the death of the author — exceptionally long |
| Sound recordings | Also protected for an extended term following the amendment |
| Registration | None: protection is automatic |
| Collective management | JACAP and JAMMS |
| No registration | Protection is automatic |
In practice
- Register with the relevant collecting society if your work is performed or broadcast.
Recent changes
The 2015 amendment extending the term to 95 years post mortem was adopted to protect the long commercial life of Jamaican music.
Where to go
- JACAP and JAMMS.
- Supreme Court for infringement claims.
Worth knowing
Because the Jamaican term is far longer than elsewhere, a recording that has entered the public domain in Europe may still be fully protected in Jamaica — and vice versa for anyone publishing from Jamaica. Because the Jamaican term is far longer than elsewhere, works free in Europe may remain protected here — and vice versa for anyone publishing from Jamaica.
The general article: Copyright · Compare with another country
Identity theft
The Cybercrimes Act and Larceny Act cover fraud by impersonation; the TRN and NIDS are the sensitive identifiers.
Identity fraud is prosecuted under the Cybercrimes Act 2015 and under fraud and forgery provisions. The Taxpayer Registration Number is used widely for identification, and the Data Protection Act 2020 governs the underlying handling of personal data. The JCF cybercrime division investigates.
Key points
| Statutes | Cybercrimes Act 2015, plus fraud and forgery offences |
|---|---|
| TRN | Widely used identifier; report misuse to Tax Administration Jamaica |
| Data protection | Data Protection Act 2020, Office of the Information Commissioner |
| Enforcement | JCF Communication Forensics and Cybercrime Division |
| Credit | Licensed credit bureaus provide reports |
| Banking | Bank of Jamaica for complaints about a financial institution |
In practice
- Notify your bank and card issuer immediately.
- Report to the JCF cybercrime division and keep the report number.
- Obtain reports from the licensed credit bureaus and dispute unknown accounts.
- Report misuse of your TRN to Tax Administration Jamaica.
Where to go
- JCF Communication Forensics and Cybercrime Division.
- Office of the Information Commissioner.
- Consumer Affairs Commission.
Worth knowing
Credit bureau licensing is relatively recent in Jamaica: check with each licensed bureau separately, because their records are not consolidated.
The general article: Identity theft · Compare with another country
Online shopping
The Consumer Affairs Commission enforces the Consumer Protection Act, mediating complaints and referring matters to the Fair Trading Commission.
Protection comes from the Consumer Protection Act, enforced by the Consumer Affairs Commission, together with the Electronic Transactions Act. The Commission mediates complaints and can refer matters to the Fair Trading Commission.
Key points
| Consumer Protection Act | Implied warranties and a right to redress for defective goods |
|---|---|
| Consumer Affairs Commission | Investigates and mediates complaints free of charge |
| Fair Trading Commission | Handles misleading advertising and unfair practices |
In practice
- Complain to the Consumer Affairs Commission: mediation is free and often successful.
- Keep receipts and written communications; the Commission requires documentation.
Where to go
- Consumer Affairs Commission.
- Bank of Jamaica for payment services.
Worth knowing
There is no general cooling-off right for online purchases. Returns depend on the trader's policy unless the goods are defective.
The general article: Online shopping · Compare with another country
Romance scams
A police cybercrime unit, and consumer protection for related disputes.
The police operate a cybercrime unit taking reports of online fraud. The consumer affairs commission handles related consumer disputes, and banks maintain fraud lines. Recovery of a completed transfer is rare, which puts the emphasis on immediate reporting.
Where to go
- Consumer affairs commission
- Financial services regulator, for investment fraud
Sources
- Jamaica Constabulary Force — Cyber Forensics and Communications Unit — report at any station; the unit handles online fraud and sextortion
- MOCA — cyber crime — Major Organised Crime and Anti-Corruption Agency
- Your mobile money provider's fraud line — the fastest lever: call before the funds are withdrawn
- eConsumer.gov — international channel for scams committed from abroad
The general article: Romance scams · Compare with another country