Trinidad and Tobago. Comprehensive data protection. Act

T&T DPAData Protection Act, 2011 (Act No. 13 of 2011, Chap. 22:04)

Partially in force

Partly verified

Medium confidence. Adoption date from general knowledge.

§1Summary

Synopsis

Sets general privacy principles for public and private bodies, but key private-sector obligations, the Information Commissioner's enforcement powers and penalties have never been brought into force.

Key themes

general privacy principles
public bodies
information commissioner

Unique features

One of the region's longest-standing partially commenced laws.

SaaS relevance

Low current enforcement risk; principles still apply to public bodies.

§2Obligations

Extraterritorial: No
Breach notification: None in force
DPO: No
Cross-border transfers: Unproclaimed provisions
Maximum penalty: None in force

§3Dates

Key dates

Adopted 22 June 2011
In force 6 January 2012
Legal Notice 2 of 2012 proclaimed Part I, parts of Part II (general privacy principles) and s.42(a)-(b); remainder (controller duties, enforcement, penalties) unproclaimed

§4Text and authority

Text

Authoritative text ttparliament.org

Authority

Office of the Information Commissioner (not established in practice)

§5Where it applies

Domestic law of: Trinidad and Tobago

§6Sources and verification

Sources consulted

uwi.edu

Verification

Medium confidence.

Partly verified

Medium confidence. Adoption date from general knowledge.