Knowledge Hub
The complete guide to the Jamaica Data Protection Act
Plain-language learning modules that help Jamaican business owners understand and apply the Data Protection Act, 2020. Written for people who run businesses, not for lawyers.
Read the Act
Browse all 77 sections and the schedules of the Data Protection Act, 2020, with linked cross-references.
Open the ActPrivacy glossary
Plain-language definitions of the terms you will meet in privacy notices and the Act.
Browse termsTemplates and checklists
Editable privacy notices, consent forms, registers, and compliance checklists to download and adapt.
Open the toolkitFAQs
Quick, plain-language answers to the questions Jamaican businesses ask most.
Browse FAQsGetting Started
Understanding the Jamaica Data Protection Act
A plain-language introduction to the Data Protection Act, 2020, who it applies to, and what it means for your business.
What is Personal Data?
Learn what counts as personal data under Jamaica's Data Protection Act, with everyday examples for real businesses.
What is Sensitive Personal Data?
Sensitive personal data needs extra protection. Learn what counts, why it matters, and the higher bar for handling it.
Who is a Data Controller?
Controller or processor? Find out which role your business plays, because it decides which duties fall on you.
Understanding the Eight Data Protection Standards
The eight standards are the heart of the Act. This module explains each one in plain English with practical examples.
Running a Compliant Business
Do I Need Consent?
Consent is one lawful basis, not the only one. Learn when you actually need it and when you do not.
How to Create a Privacy Notice
A step-by-step guide to writing a clear privacy notice that meets the Act and that people can actually understand.
Is My Business Compliant?
A plain-language self-check across the key areas of the Act, so you know where you stand and what to fix first.
How to Secure Personal Data
Practical, low-cost security steps any Jamaican business can take to meet the Act's security standard.
How to Handle a Subject Access Request
A step-by-step process for answering a request from someone who wants the personal data you hold about them.
How Long Should You Keep Records?
A plain-language guide to data retention: how long to keep personal data, how to decide, and how to dispose of it safely.
International Data Transfers
When using overseas tools or storage counts as an international transfer, and what the Act expects you to do about it.
Industry Guides
Data Protection for Medical and Dental Practices
A practical data protection guide for Jamaican medical and dental practices that handle patient health records every day.
Data Protection for Private Schools
How Jamaican private schools and early childhood institutions should handle student, parent, and staff data under the DPA.
Data Protection for Retail Businesses
How Jamaican retailers and e-commerce stores should handle customer data, loyalty programmes, CCTV, and marketing under the DPA.
Data Protection for Hotels and Hospitality
Guidance for Jamaican hotels, guest houses, villas, and restaurants on handling guest data, ID at check-in, bookings, and CCTV.
Data Protection for Professional Services
Data protection guidance for Jamaican law firms, accountants, consultants, and agencies that handle confidential client information.
Data Protection for Financial Services
Guidance for Jamaican credit unions, insurance brokers, microfinance, and similar firms handling sensitive financial data.
Data Protection for Construction and Trades
Data protection guidance for Jamaican construction firms, contractors, and trades that handle worker, subcontractor, and client data.
Data Protection for NGOs and Churches
Guidance for Jamaican non-profits, churches, and charities on handling member, donor, and beneficiary data under the DPA.
Data Protection for IT and Web Companies
Guidance for Jamaican IT firms, web developers, and agencies that are often data processors for their clients.
Data Protection for Real Estate
Guidance for Jamaican real estate agents and property managers on handling client, landlord, tenant, and buyer data.
Rights & Requests
Data Breaches
More sector guides coming soon
We are adding industry-specific modules (retailers, professional services, hospitality, financial services and more), written with our legal team. New guides appear here as they are published.