Bahamas DPA
Data Protection (Privacy of Personal Information) Act 2003
Bahamas' data protection law establishing right to prevent direct marketing and data subject access rights. Modernization pending.
Jurisdiction
Bahamas
Enacted
Jul 31, 2003
Effective
Apr 1, 2007
Enforcement
Data Protection Commissioner
Reform pending - 2025 bill under consideration
Bahamas GovernmentWhy It Matters
Bahamas' pending 2025 reform may introduce AI-specific provisions. Monitor for updates relevant to chatbot regulation.
Recent Developments
2025 reform bill under consideration to modernize framework
At a Glance
Applies to
Requires
Who Must Comply
- Data controllers in Bahamas
- Entities processing data of Bahamian residents
- Direct marketing operations
Obligations fall on:
Safety Provisions
- Right to prevent direct marketing
- Data subject access rights
- Security measures for personal data
- Data controller registration
Compliance & Enforcement
Penalties
Fines for violations
Primary Source
Bahamas Government
https://www.bahamas.gov.bs/
View on map
Bahamas
Focus Areas
General regulation
Cite This
APA
Bahamas. (2003). Data Protection (Privacy of Personal Information) Act 2003.
Related Regulations
CARICOM CCSCAP 2025
CARICOM's 2025 regional cyber security framework establishing digital safety culture and coordinated incident response across 18 member states.
Chile Cybersecurity Law
First cybersecurity framework law in Latin America (Law 21,663 promulgated Mar 26, 2024; published Apr 8, 2024). Creates National Cybersecurity Agency (ANCI), mandatory incident reporting, and encryption rights.
Puerto Rico Cybersecurity Act
Puerto Rico's comprehensive cybersecurity law establishing cybersecurity framework for public and private sectors, complementing Act 111-2005 breach notification.
Argentina AI Strategy
Non-binding AI governance guidelines establishing principles for responsible AI use. Argentina positioning as AI innovation hub with limited regulatory barriers. Emphasizes transparency, accountability, and human oversight. Multiple legislative proposals pending inspired by EU AI Act, aiming to establish formal regulatory authority.
AIDA
Would have regulated high-impact AI systems with potential penalties up to $25M or 5% global revenue. Part of Bill C-27 which died when Parliament ended.
Brazil ECA Digital
Comprehensive child digital safety law applying to any IT product or service directed at or likely to be accessed by minors in Brazil, with extraterritorial reach.
Last updated January 22, 2026. Verify against primary sources before relying on this information.