Skip to main content

Effective Approaches for Data Controllers in Responding to Requests for Access and Complaints from Data Subjects

Under the Data Protection Act (‘DPA’ or the Act), individuals (called ‘data subjects’) whose personal data are being processed by third parties (‘data controllers’) have the right to access and be informed about the processing of that information and to make a complaint to the data controller or the Information Commissioner if their personal data is not being processed in keeping with standards prescribed by the DPA.

What are the Obligations of Data Controllers

Register with the Information Commissioner

A data controller that processes personal data must be registered with the Information Commissioner. 
A data controller that wishes to process personal data must submit to the Information Commissioner the following information: 

Educational institutions urged to appoint data protection officers

EDUCATIONAL INSTITUTIONS are being urged to appoint data protection officers to monitor compliance with the Data Protection Act, 2020 and report non-conformity not remedied within reasonable time.

The call comes from Information Commissioner Celia Barclay, and is in light of the anticipated implementation of the legislation later this year.

Jamaica’s new information commissioner talks meeting DPA mandate from the ground up

Author: Jennifer Bryant, IAPP Associate Editor

Jamaica’s Data Protection Act, passed in 2020, established the Office of the Information Commissioner to enforce data privacy rights outlined in the legislation. Appointed Dec. 1, 2021 to give strategic direction to the OIC, Information Commissioner Celia Barclay is in the process of building the office from the ground up.