Skip to main content

Jamaica DPA

Data Protection Act 2020

Jamaica's comprehensive data protection law establishing rights regarding automated decision-taking and requiring parental consent for children's data.

Jurisdiction

Jamaica

Enacted

Sep 4, 2020

Effective

Dec 1, 2021

Enforcement

Office of the Information Commissioner

Myers Fletcher Analysis

Why It Matters

Jamaica's automated decision-taking rights apply to AI chatbots making risk assessments or providing recommendations to Jamaican users.

At a Glance

Applies to

AI CompanionMental Health AppGeneral Chatbot

Who Must Comply

  • Data controllers and processors in Jamaica
  • Entities processing data of Jamaican residents
  • Automated decision-making systems

Safety Provisions

  • Rights regarding automated decision-taking
  • Parental consent required for children's data
  • Data controller registration required
  • Breach notification to Information Commissioner
  • Data Protection Impact Assessment for high-risk processing

Compliance & Enforcement

Penalties

JMD 5M; criminal liability

Criminal liability

View on map

Jamaica

Focus Areas

Mental health & crisis
Child safety
Algorithmic accountability

Cite This

APA

Jamaica. (2020). Data Protection Act 2020.

Related Regulations

In Effect CARICOM

CARICOM CCSCAP 2025

CARICOM's 2025 regional cyber security framework establishing digital safety culture and coordinated incident response across 18 member states.

In Effect CL

Chile Cybersecurity Law

First cybersecurity framework law in Latin America (Law 21,663 promulgated Mar 26, 2024; published Apr 8, 2024). Creates National Cybersecurity Agency (ANCI), mandatory incident reporting, and encryption rights.

In Effect PR

Puerto Rico Cybersecurity Act

Puerto Rico's comprehensive cybersecurity law establishing cybersecurity framework for public and private sectors, complementing Act 111-2005 breach notification.

In Effect AR

Argentina AI Strategy

Non-binding AI governance guidelines establishing principles for responsible AI use. Argentina positioning as AI innovation hub with limited regulatory barriers. Emphasizes transparency, accountability, and human oversight. Multiple legislative proposals pending inspired by EU AI Act, aiming to establish formal regulatory authority.

Failed CA

AIDA

Would have regulated high-impact AI systems with potential penalties up to $25M or 5% global revenue. Part of Bill C-27 which died when Parliament ended.

In Effect PE

Peru AI Regulations

Peru's first comprehensive AI regulatory framework, inspired by EU AI Act. Establishes three-tier risk-based approach: prohibited uses, high-risk systems (including healthcare), and low-risk/acceptable AI. First general AI regulation in Latin America. Requires human oversight, transparency, and risk assessments for high-risk AI including healthcare applications.

Last updated January 22, 2026. Verify against primary sources before relying on this information.