Bahamas. Comprehensive data protection. Act
Bahamas DPA 2003Data Protection (Privacy of Personal Information) Act, 2003
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Older UK-1998-style law requiring fair and lawful processing, security and access/correction rights, enforced by a Data Protection Commissioner.
- Key themes
- Unique features
No breach notification duty.
- SaaS relevance
Applies to data controllers in the Bahamas; low penalty exposure.
§2Obligations
- Extraterritorial
- No
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- Commissioner may prohibit transfers
- Maximum penalty
- BSD 100,000 on indictment
§3Dates
- Key dates
- Adopted
- In force
- To be repealed and replaced by Data Protection Act, 2025 once commenced
§4Text and authority
- Text
- Authoritative text laws.bahamas.gov.bs
- Authority
- Office of the Data Protection Commissioner
§5Where it applies
- Domestic law of
- Bahamas
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.