Knowledge Hub
The complete guide to the Jamaica Data Protection Act
Plain-language learning modules that help Jamaican business owners understand and apply the Data Protection Act, 2020. Written for people who run businesses, not for lawyers.
Read the Act
Browse all 77 sections and the schedules of the Data Protection Act, 2020, with linked cross-references.
Open the ActIndustry guides
Sector-by-sector guidance for healthcare, education, financial services, retail, hospitality and more.
Find your industryPrivacy glossary
Plain-language definitions of the terms you will meet in privacy notices and the Act.
Browse termsTemplates and checklists
Editable privacy notices, consent forms, registers, and compliance checklists to download and adapt.
Open the toolkitFAQs
Quick, plain-language answers to the questions Jamaican businesses ask most.
Browse FAQsGetting Started
Understanding the Jamaica Data Protection Act
A plain-language introduction to the Data Protection Act, 2020, who it applies to, and what it means for your business.
What is Personal Data?
Learn what counts as personal data under Jamaica's Data Protection Act, with everyday examples for real businesses.
What is Sensitive Personal Data?
Sensitive personal data needs extra protection. Learn what counts, why it matters, and the higher bar for handling it.
Who is a Data Controller?
Controller or processor? Find out which role your business plays, because it decides which duties fall on you.
Understanding the Eight Data Protection Standards
The eight standards are the heart of the Act. This module explains each one in plain English with practical examples.
Running a Compliant Business
Do I Need Consent?
Consent is one lawful basis, not the only one. Learn when you actually need it and when you do not.
How to Create a Privacy Notice
A step-by-step guide to writing a clear privacy notice that meets the Act and that people can actually understand.
Is My Business Compliant?
A plain-language self-check across the key areas of the Act, so you know where you stand and what to fix first.
How to Secure Personal Data
Practical, low-cost security steps any Jamaican business can take to meet the Act's security standard.
How to Handle a Subject Access Request
A step-by-step process for answering a request from someone who wants the personal data you hold about them.
How Long Should You Keep Records?
A plain-language guide to data retention: how long to keep personal data, how to decide, and how to dispose of it safely.
International Data Transfers
When using overseas tools or storage counts as an international transfer, and what the Act expects you to do about it.
Industry Guides
Data Protection for Jamaican Medical Practices
A practical guide to Jamaica's Data Protection Act for doctors, clinics and healthcare providers handling patient and health information.
Data Protection for Jamaican Private Schools
How Jamaican private schools can manage student, parent and employee personal data across the whole student lifecycle under the Data Protection Act.
Data Protection for Jamaican Accounting Firms
Practical Jamaica DPA guidance for accountants, bookkeepers and accounting practices handling client, payroll, tax and financial information.
Data Protection for Jamaican Law Firms
Jamaica Data Protection Act guidance for law firms handling client, employee, litigation and sensitive personal information.
Data Protection for Jamaican Retailers & E-commerce Businesses
How Jamaican retailers and online stores should manage customer, payment, marketing, delivery and website data under the Data Protection Act.
Data Protection for Jamaican Hotels & Tourism Businesses
A practical DPA guide for Jamaican hotels, villas, attractions, tour operators and tourism businesses handling guest information.
Data Protection for Jamaican Churches & Charities
Practical Jamaica DPA guidance for churches, charities and non-profits handling member, donor, volunteer and beneficiary information.
Data Protection for Jamaican Employers & HR Departments
How Jamaican employers and HR teams should manage employee, applicant, payroll, health and workplace information under the Data Protection Act.
Data Protection for Jamaican Financial Services Businesses
Jamaica DPA guidance for financial services businesses handling customer identity, financial, transaction, KYC and employee information.
Data Protection for Jamaican Property Managers & Real Estate Businesses
Practical Jamaica Data Protection Act guidance for real estate dealers, property managers, landlords and strata businesses.
Data Protection for Medical and Dental Practices
A practical data protection guide for Jamaican medical and dental practices that handle patient health records every day.
Data Protection for Private Schools
How Jamaican private schools and early childhood institutions should handle student, parent, and staff data under the DPA.
Data Protection for Retail Businesses
How Jamaican retailers and e-commerce stores should handle customer data, loyalty programmes, CCTV, and marketing under the DPA.
Data Protection for Hotels and Hospitality
Guidance for Jamaican hotels, guest houses, villas, and restaurants on handling guest data, ID at check-in, bookings, and CCTV.
Data Protection for Professional Services
Data protection guidance for Jamaican law firms, accountants, consultants, and agencies that handle confidential client information.
Data Protection for Financial Services
Guidance for Jamaican credit unions, insurance brokers, microfinance, and similar firms handling sensitive financial data.
Data Protection for Construction and Trades
Data protection guidance for Jamaican construction firms, contractors, and trades that handle worker, subcontractor, and client data.
Data Protection for NGOs and Churches
Guidance for Jamaican non-profits, churches, and charities on handling member, donor, and beneficiary data under the DPA.
Data Protection for IT and Web Companies
Guidance for Jamaican IT firms, web developers, and agencies that are often data processors for their clients.
Data Protection for Real Estate
Guidance for Jamaican real estate agents and property managers on handling client, landlord, tenant, and buyer data.
Rights & Requests
Data Breaches
Data Management
How to Build a Personal Data Register for Your Business
Learn how to identify and document the personal data your Jamaican business collects, uses, stores, shares and deletes under the Data Protection Act.
How Long Should You Keep Personal Data?
How Jamaican businesses should decide retention periods, build a retention schedule and dispose of personal data securely under the Data Protection Act.
Is Your Business Sending Personal Data Outside Jamaica?
How everyday tools like cloud hosting and overseas support can create cross-border data transfers, and what Jamaican businesses should document.
Risk & Accountability
Understanding DPIAs in Jamaica
A practical MSME guide to Data Protection Impact Assessments (DPIAs) under Jamaica's data-protection framework, and what a DPIA should examine.
Data Protection Risk Assessments for Small Businesses
How Jamaican MSMEs can assess privacy risk proportionately, what increases risk, and how to turn a risk register into real action.
Third-Party Management
Individual Rights
Incidents & Security
Training & Awareness
Compliance Management
More sector guides coming soon
We are adding industry-specific modules (retailers, professional services, hospitality, financial services and more), written with our legal team. New guides appear here as they are published.