Knowledge Hub

Search the Knowledge Hub

Find the module you need by topic, category, or level.

44 results

Getting Started

Understanding the Jamaica Data Protection Act

A plain-language introduction to the Data Protection Act, 2020, who it applies to, and what it means for your business.

Beginner 15 min

Getting Started

What is Personal Data?

Learn what counts as personal data under Jamaica's Data Protection Act, with everyday examples for real businesses.

Beginner 12 min

Getting Started

What is Sensitive Personal Data?

Sensitive personal data needs extra protection. Learn what counts, why it matters, and the higher bar for handling it.

Beginner 10 min

Getting Started

Who is a Data Controller?

Controller or processor? Find out which role your business plays, because it decides which duties fall on you.

Beginner 10 min

Getting Started

Understanding the Eight Data Protection Standards

The eight standards are the heart of the Act. This module explains each one in plain English with practical examples.

Intermediate 18 min

Rights & Requests

Understanding Data Subject Rights

The Act gives individuals enforceable rights over their data. Learn what each right means and how to respond.

Intermediate 15 min

Running a Compliant Business

Do I Need Consent?

Consent is one lawful basis, not the only one. Learn when you actually need it and when you do not.

Intermediate 14 min

Running a Compliant Business

How to Create a Privacy Notice

A step-by-step guide to writing a clear privacy notice that meets the Act and that people can actually understand.

Beginner 14 min

Data Breaches

What to Do If You Have a Data Breach

A calm, practical first-response plan for when personal data may have been lost, exposed, or stolen.

Intermediate 14 min

Running a Compliant Business

Is My Business Compliant?

A plain-language self-check across the key areas of the Act, so you know where you stand and what to fix first.

Beginner 12 min

Running a Compliant Business

How to Secure Personal Data

Practical, low-cost security steps any Jamaican business can take to meet the Act's security standard.

Beginner 13 min

Running a Compliant Business

How to Handle a Subject Access Request

A step-by-step process for answering a request from someone who wants the personal data you hold about them.

Intermediate 13 min

Running a Compliant Business

How Long Should You Keep Records?

A plain-language guide to data retention: how long to keep personal data, how to decide, and how to dispose of it safely.

Beginner 12 min

Running a Compliant Business

International Data Transfers

When using overseas tools or storage counts as an international transfer, and what the Act expects you to do about it.

Intermediate 12 min

Data Management

How to Build a Personal Data Register for Your Business

Learn how to identify and document the personal data your Jamaican business collects, uses, stores, shares and deletes under the Data Protection Act.

Beginner 11 min

Risk & Accountability

Understanding DPIAs in Jamaica

A practical MSME guide to Data Protection Impact Assessments (DPIAs) under Jamaica's data-protection framework, and what a DPIA should examine.

Intermediate 10 min

Incidents & Security

What to Do When Your Business Has a Data Breach

A step-by-step guide for Jamaican businesses on containing, assessing, escalating and documenting a personal-data breach under the Data Protection Act.

Beginner 10 min

Data Management

How Long Should You Keep Personal Data?

How Jamaican businesses should decide retention periods, build a retention schedule and dispose of personal data securely under the Data Protection Act.

Beginner 9 min

Third-Party Management

Data Processors, When Another Company Handles Personal Data for You

How Jamaican businesses can identify data processors, understand their responsibilities and keep a processor register under the Data Protection Act.

Beginner 9 min

Data Management

Is Your Business Sending Personal Data Outside Jamaica?

How everyday tools like cloud hosting and overseas support can create cross-border data transfers, and what Jamaican businesses should document.

Intermediate 8 min

Individual Rights

How to Handle a Data Subject Request

A six-step process for Jamaican businesses to recognise, record, verify and respond to data-subject rights requests under the Data Protection Act.

Intermediate 9 min

Risk & Accountability

Data Protection Risk Assessments for Small Businesses

How Jamaican MSMEs can assess privacy risk proportionately, what increases risk, and how to turn a risk register into real action.

Intermediate 9 min

Training & Awareness

Data Protection Responsibilities for Employees

Why data protection is everyone's job, what every employee should understand, and how to run and document role-based privacy training.

Beginner 8 min

Compliance Management

Your Annual Data Protection Compliance Checklist

A twelve-point annual review to keep your Jamaican business's data-protection compliance current as the organisation changes.

Beginner 9 min

Industry Guides

Data Protection for Jamaican Medical Practices

A practical guide to Jamaica's Data Protection Act for doctors, clinics and healthcare providers handling patient and health information.

Intermediate 13 min

Industry Guides

Data Protection for Jamaican Private Schools

How Jamaican private schools can manage student, parent and employee personal data across the whole student lifecycle under the Data Protection Act.

Intermediate 12 min

Industry Guides

Data Protection for Jamaican Accounting Firms

Practical Jamaica DPA guidance for accountants, bookkeepers and accounting practices handling client, payroll, tax and financial information.

Intermediate 11 min

Industry Guides

Data Protection for Jamaican Law Firms

Jamaica Data Protection Act guidance for law firms handling client, employee, litigation and sensitive personal information.

Intermediate 12 min

Industry Guides

Data Protection for Jamaican Retailers & E-commerce Businesses

How Jamaican retailers and online stores should manage customer, payment, marketing, delivery and website data under the Data Protection Act.

Beginner 11 min

Industry Guides

Data Protection for Jamaican Hotels & Tourism Businesses

A practical DPA guide for Jamaican hotels, villas, attractions, tour operators and tourism businesses handling guest information.

Intermediate 11 min

Industry Guides

Data Protection for Jamaican Churches & Charities

Practical Jamaica DPA guidance for churches, charities and non-profits handling member, donor, volunteer and beneficiary information.

Beginner 11 min

Industry Guides

Data Protection for Jamaican Employers & HR Departments

How Jamaican employers and HR teams should manage employee, applicant, payroll, health and workplace information under the Data Protection Act.

Intermediate 12 min

Industry Guides

Data Protection for Jamaican Financial Services Businesses

Jamaica DPA guidance for financial services businesses handling customer identity, financial, transaction, KYC and employee information.

Advanced 12 min

Industry Guides

Data Protection for Jamaican Property Managers & Real Estate Businesses

Practical Jamaica Data Protection Act guidance for real estate dealers, property managers, landlords and strata businesses.

Intermediate 11 min

Industry Guides

Data Protection for Medical and Dental Practices

A practical data protection guide for Jamaican medical and dental practices that handle patient health records every day.

Intermediate 18 min

Industry Guides

Data Protection for Private Schools

How Jamaican private schools and early childhood institutions should handle student, parent, and staff data under the DPA.

Intermediate 18 min

Industry Guides

Data Protection for Retail Businesses

How Jamaican retailers and e-commerce stores should handle customer data, loyalty programmes, CCTV, and marketing under the DPA.

Intermediate 16 min

Industry Guides

Data Protection for Hotels and Hospitality

Guidance for Jamaican hotels, guest houses, villas, and restaurants on handling guest data, ID at check-in, bookings, and CCTV.

Intermediate 16 min

Industry Guides

Data Protection for Professional Services

Data protection guidance for Jamaican law firms, accountants, consultants, and agencies that handle confidential client information.

Intermediate 16 min

Industry Guides

Data Protection for Financial Services

Guidance for Jamaican credit unions, insurance brokers, microfinance, and similar firms handling sensitive financial data.

Advanced 17 min

Industry Guides

Data Protection for Construction and Trades

Data protection guidance for Jamaican construction firms, contractors, and trades that handle worker, subcontractor, and client data.

Beginner 14 min

Industry Guides

Data Protection for NGOs and Churches

Guidance for Jamaican non-profits, churches, and charities on handling member, donor, and beneficiary data under the DPA.

Beginner 14 min

Industry Guides

Data Protection for IT and Web Companies

Guidance for Jamaican IT firms, web developers, and agencies that are often data processors for their clients.

Intermediate 15 min

Industry Guides

Data Protection for Real Estate

Guidance for Jamaican real estate agents and property managers on handling client, landlord, tenant, and buyer data.

Beginner 14 min