Jamaica has pending legislation that will establish eight data protection standards for processing personal data. The standards will require that personal data must be processed fairly and lawfully; is only to be obtained for specified purposes; is to be adequate, relevant, and not excessive; must be accurate; must not be kept for longer than is necessary to satisfy the intended processing purposes; must be processed in accordance with the rights of data subjects under the legislation; is to be protected by taking appropriate technical and organizational measures and security breaches must be reported; and must not be transferred outside Jamaica.
