Jamaica Data Protection Act 2020: every control, and what you already have

17 controls 124 frameworks share controls with it Jamaica verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

Jamaica Data Protection Act 2020 Evidence & Implementation Kit

17 controls is the documentation set somebody has to write. This is that set, already written: an adopt-ready artifact for every control in policy and procedure text you edit rather than draft, and the evidence checklist an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
Bahrain PDPL	8	measure it →
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)	8	measure it →
FTC GLBA Safeguards Rule (16 CFR Part 314)	8	measure it →
Law No. 172-13 on the Protection of Personal Data	8	measure it →
Ley Orgánica de Protección de Datos Personales (LOPDP)	8	measure it →
Privacy Act 1988 (Australia)	8	measure it →
Singapore Government Instruction Manual on ICT&SS Management (IM8)	8	measure it →
South Korea ISMS-P	8	measure it →
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)	8	measure it →
APPI	7	measure it →
ISO/IEC 27400:2022	7	measure it →
Barbados Data Protection Act 2019	6	measure it →

Every control

Code	Control	Also in
`JM-DPA2020-Breach-Notification-Sec28-30-Duty-Notify-Commissioner-Affected-Subjects-72-Hours-Severe`	Jamaica DPA 2020 Personal Data Breach Notification + Sections 28-30 + Duty to Notify Commissioner + Affected Subjects + 72-Hour Reporting + High Risk + Severe + Mitigation + Docume	45
`JM-DPA2020-Childrens-Data-Special-Categories-Sensitive-Sec5-Genetic-Biometric-Health-Race-Political-Religious`	Jamaica DPA 2020 Section 5 Sensitive Personal Data + Special Categories + Genetic + Biometric + Health + Race + Ethnicity + Political + Religious + Philosophical + Trade Union + Se	48
`JM-DPA2020-Complaints-Enforcement-Sec45-50-Investigation-Hearing-Determination-Appeal-Tribunal`	Jamaica DPA 2020 Complaints + Enforcement + Sections 45-50 + Complaint Procedure + Investigation + Hearing + Determination + Compliance Orders + Administrative Penalties + Data Pro	56
`JM-DPA2020-Information-Commissioner-Sec6-15-OIC-Office-Information-Commissioner-Establishment-Independence-Functions`	Jamaica DPA 2020 Office of the Information Commissioner (OIC) + Sections 6-15 + Establishment + Independence + Functions + Powers + Registration Requirements + Investigation + Enfo	0
`JM-DPA2020-Joint-Controller-Processor-Sec24-25-26-Arrangements-Allocation-Responsibilities-Contracts`	Jamaica DPA 2020 Joint Controllers + Processors + Sections 24-26 + Arrangements + Allocation of Responsibilities + Contracts + Records of Processing Activities (ROPA) + Sub-Process	58
`JM-DPA2020-Penalty-Risk-Sec31-33-50-52-Criminal-Civil-Administrative-Up-to-10M-JMD-Compensation-Imprisonment`	Jamaica DPA 2020 Penalty Risk Management + Sections 31-33 + 50 + 52 + Criminal Offences + Civil Compensation + Administrative Penalties + Up to JMD 10 Million + Imprisonment + Dire	0
`JM-DPA2020-Privacy-by-Design-Default-Sec34-Engineering-Data-Protection-Impact-Assessment-DPIA-Risk-Based`	Jamaica DPA 2020 Privacy by Design + Privacy by Default + Section 34 + Data Protection Impact Assessment (DPIA) + Risk-Based + High-Risk Processing + Prior Consultation + Privacy E	69
`JM-DPA2020-Public-Authority-Exemptions-Sec4-44-46-National-Security-Intelligence-Crime-Tax-Defence-Limitations`	Jamaica DPA 2020 Public Authority Exemptions + Sections 4 + 44 + 46 + National Security + Intelligence Services + Crime Prevention + Tax + Defence + Research + Journalism + Data Su	0
`JM-DPA2020-Scope-Application-Sec1-3-31Dec2021-PartialEffective-1Dec2023-MandatoryCompliance-Territorial-Extraterritorial`	Jamaica Data Protection Act 2020 - Scope + Application + Sections 1-3 + Commencement 1 December 2021 Partial + 1 December 2023 Mandatory Compliance + Territorial + Extraterritorial	0
`JM-DPA2020-Standard1-Fair-Lawful-Transparent-Sec19-Lawful-Basis-Consent-Contract-Legal-Vital-Public-Interest-Legitimate`	Jamaica DPA 2020 Standard 1 - Fair + Lawful + Transparent Processing + Section 19 + Lawful Basis + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Inte	0
`JM-DPA2020-Standard2-Purpose-Limitation-Sec20-Specified-Explicit-Legitimate-No-Further-Processing-Incompatible`	Jamaica DPA 2020 Standard 2 - Purpose Limitation + Section 20 + Specified + Explicit + Legitimate Purposes + No Further Processing Incompatible + Purpose Compatibility Test + Secon	0
`JM-DPA2020-Standard3-Adequacy-Relevance-Necessity-Sec21-Data-Minimisation-No-Excess-Processing`	Jamaica DPA 2020 Standard 3 - Adequacy + Relevance + Necessity + Section 21 + Data Minimisation + No Excess Processing + Proportionality + Privacy by Default + Field-Level Restrain	0
`JM-DPA2020-Standard4-Accuracy-Sec22-Up-to-Date-Rectification-Erasure-Correction-Right`	Jamaica DPA 2020 Standard 4 - Accuracy + Section 22 + Up-to-Date + Rectification Right + Erasure Right + Correction Procedures + Quality Assurance + Sources Verification	0
`JM-DPA2020-Standard5-Retention-Sec23-Time-Limit-No-Longer-Than-Necessary-Erasure-Deletion-Anonymisation`	Jamaica DPA 2020 Standard 5 - Retention + Section 23 + Time Limit + No Longer Than Necessary + Erasure + Deletion + Anonymisation + Retention Schedule + Legal Hold + Backup Conside	0
`JM-DPA2020-Standard6-Subject-Rights-Sec37-43-Access-Correction-Erasure-Portability-Objection-Profiling-Restriction`	Jamaica DPA 2020 Standard 6 - Data Subject Rights Enablement + Section 37-43 + Access Right + Correction Right + Erasure Right + Portability Right + Objection Right + Automated Dec	48
`JM-DPA2020-Standard7-Security-Sec35-Appropriate-Technical-Organisational-Confidentiality-Integrity-Availability-Resilience`	Jamaica DPA 2020 Standard 7 - Security + Section 35 + Appropriate Technical and Organisational Measures + Confidentiality + Integrity + Availability + Resilience + Encryption + Pse	39
`JM-DPA2020-Standard8-Transfers-Outside-Jamaica-Sec27-Adequacy-Decisions-Standard-Contractual-Clauses-BCR-Derogations`	Jamaica DPA 2020 Standard 8 - Transfers Outside Jamaica + Section 27 + Adequacy Decisions + Standard Contractual Clauses + Binding Corporate Rules + Derogations + Cross-Border Data	42

Tell me when Jamaica Data Protection Act 2020 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Board reporting + privacy risk statement + records + per quarter + Audit Committee
Reasonable care defence + records + per control + audit trail + training records
Penalty risk assessment + per processing + records + quarterly + Board reporting
Reasonable care defence evidence + Section 31(2) + records + per control + audit trail
D and O liability + Section 31(3) + insurance + records + per director/officer + Board
Civil class action preparedness + Section 52 + records + per risk class + counsel
Breach detection + SIEM/DLP/EDR/insider + records + per incident + audit trail
OIC notification + 72-hour + Section 28-29 + records + per breach + phased updates
Subject notification + high-risk + Section 30 + records + per breach + clear language
Breach documentation + ALL breaches + Section 28(5) + records + audit-ready

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

Board reporting infrequent or absent named by 3 frameworks
Processor notification absent in contracts named by 3 frameworks
Lawful basis selected after processing (consent bias) named by 3 frameworks
Reasonable care defence undocumented named by 3 frameworks
Subject notification skipped (high-risk underestimated) named by 3 frameworks
Lawful mechanism not chosen per transfer named by 3 frameworks

What this page is

A control-level reference for Jamaica Data Protection Act 2020, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition