Privacy Map

Bahamas. Comprehensive data protection. Act

Bahamas DPA 2025Data Protection Act, 2025

Enacted – not yet in force
Partly verifiedLow confidence. Enactment inferred from MoFo listing 'Data Protection Act, 2025 - not yet in effect'; assent date not verified.

§1Summary

Synopsis

GDPR-inspired replacement for the 2003 Act introducing modern rights, consent standards, enhanced protection for sensitive and children's data, breach reporting and registration of controllers and processors.

Key themes
  • consent
  • data subject rights
  • sensitive data
  • breach notification
  • registration
  • transfers
Unique features

Registration of both controllers and processors; phased commencement over several years.

SaaS relevance

Once in force, SaaS processors serving Bahamian customers may need to register and meet breach-notice duties.

§2Obligations

Breach notification
Authority and affected individuals (details pending)
Cross-border transfers
Regulated
Maximum penalty
Fines up to BSD 50,000 and/or 3 years for most breach offences (as reported)

§3Dates

Key dates
  • Adopted
  • Bill tabled in House of Assembly 2025-10-08; listed as Act 2025 'not yet in effect'; phased implementation over several years planned

§4Text and authority

Text
Authority
Office of the Data Protection Commissioner

§5Where it applies

Domestic law of
Bahamas

§6Sources and verification

Verification

Low confidence.

Partly verifiedLow confidence. Enactment inferred from MoFo listing 'Data Protection Act, 2025 - not yet in effect'; assent date not verified.