Registration of Data Controllers

FOR IMMEDIATE RELEASE

 

REGISTRATION OF DATA CONTROLLERS COMMENCES JUNE 1, 2024

 

Kingston, May 30, 2024: The Office of the Information Commissioner (OIC) wishes to remind the public that the 6-month extension of time for data controllers to prepare for compliance with the Data Protection Act, 2020 (DPA) expires on May 31, 2023.

 

Effective Saturday, June 1, 2024, data controllers may register with the OIC for the first registration year, being the period from December 1, 2023 to November 30, 2024. 

 

As part of the phased implementation of the DPA, during the initial phase, commencing June 1, 2024 through to August 31, 2024, the OIC will be focusing on processing the registration applications of data controllers in specified priority groups as determined by the OIC, balancing the rights and interests of all persons. 

 

The following are the data controllers to be registered as first priority:

  • All Public Authorities as defined by the Act

  • All other data controllers processing personal data, including sensitive personal data or data related to criminal convictions, for an estimate of 10,000 or more data subjects AND operating within the sectors specified below: 

  • Education 

  • Finance 

  • Health 

  • Information and Communication Technologies (ICT) 

  • Tourism and Hospitality 

 

Notwithstanding the above, any data controller – including sole proprietors/practitioners or operators of micro, small and medium-sized enterprises (MSMEs) across all sectors or industries - can submit their application for registration.

 

Data controllers must have a validated data controller account to access the Registration Form on the “My OIC Portal” of the OIC’s website at www.oic.gov.jm. Data controllers who have not yet created their unique data controller accounts are encouraged to do so now. 

 

On June 1, 2024, data controllers with accounts will be granted access to the registration form where they can proceed to enter their registration particulars. Data controllers may save and close the registration form if they are unable to enter all particulars at one time. They will have thirty (30) days from the date of first log-in to complete and submit the application and upload any supporting documents in PDF.

 

Following the completion of the registration form, data controllers must pay the prescribed fees which are as follows:

 

(a) For companies and public authorities: $25,000

(b) For partnerships: $15,000

(c) Sole traders and individuals: $7,500

 

The particulars of data controllers who have successfully registered with the OIC will be published in the online Register of Data Controllers, pursuant to section 17 of the Act, for the remainder of this current registration year.

 

Please note that, following the initial registration, all data controllers must renew their registration and pay the prescribed fees on or before December 1 each subsequent registration year.

 

NOTE: NO paper applications or payments of the registration fees will be accepted at the Office of the Information Commissioner.

 

 

About the OIC

 

The Office of the Information Commissioner, OIC, was established in 2021 under the Data Protection Act of 2020. We are committed to advancing the mission of data protection in Jamaica, fostering trust and confidence in the digital landscape. The OIC encourages all data controllers to continue taking the necessary steps to achieve compliance with the Data Protection Act and protect the personal data entrusted to them.

 

For media inquires, contact:

 

The Communication and International Relations Branch 

Email: Click here to show mail address 

Tel: 876-960-0874 ext 4516

Tel: 876-929-6952 ext 4517