Jamaica DPA

Jamaica Data Protection Act (2020) - 8 standards, registration, data subject rights, breach notification.


Short name	JM DPA
Region	Americas
Country or scope	Jamaica
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers JM DPA

Scan requirements: 6, all decided by a scan.
Controls: the scan requirements below, plus 11 controls from Safeguard's control catalog for JM DPA.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 24: 2 written for JM DPA and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`JM-DPA-STD7` Seventh Standard: Security Measures	Appropriate technical and organisational measures must protect personal data against unauthorised or unlawful processing and against accidental loss or damage, which for processing software includes verifiable artifact integrity (DPA 2020 seventh data protection standard)	Scan
`JM-DPA-REG` Registration of Data Controllers	Data controllers must register with the Information Commissioner with particulars describing their processing, requiring identifiable, dated documentation of the systems used (DPA 2020 controller registration provisions)	Scan
`JM-DPA-BREACH` Security Breach Notification Readiness	Security breaches affecting personal data must be notified to the Information Commissioner within seventy-two hours, requiring the ability to determine exactly which components were compromised (DPA 2020 breach notification obligation)	Scan
`JM-DPA-STD8` Eighth Standard: Transfers and Third Parties	Personal data must not be transferred without adequate protection, and processing through third parties requires equivalent safeguards, extending to visibility over who supplies processing software components (DPA 2020 eighth data protection standard and processor provisions)	Scan
`JM-DPA-QUAL` Adequacy and Accuracy Standards	The standards require data to be adequate, relevant, accurate and kept up to date; a processing environment evidences this discipline through a complete software inventory with names and versions (DPA 2020 data quality standards)	Scan
`JM-DPA-INV` Accountability for Processing Systems	Controllers must be able to demonstrate compliance with the standards, which presumes maintained knowledge of the systems and components performing processing (DPA 2020 accountability/duty-to-comply provisions)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`JM-STD1`	Lawfulness of Processing
`JM-STD2`	Purpose Limitation
`JM-STD3`	Adequacy & Data Minimisation
`JM-STD4`	Accuracy & Keeping Up To Date
`JM-STD5`	Retention Limitation
`JM-STD6`	Data Subject Rights
`JM-STD7`	Security of Personal Information
`JM-STD8`	International Transfer Standard
`JM-23`	Data Controller Registration
`JM-27`	Breach Notification Procedure
`JM-31`	Data Protection Officer Appointment

Policy templates

Written for JM DPA:

Jamaica DPA Registration Pack
Jamaica DPA Security & Breach Management Policy

And 22 from the standard set, adapted to JM DPA.