Law: Ordinance No. 84 of 4 September 2010 Laying Down Rules on the Protection of Personal Data (Data Protection Ordinance) (only available in Dutch here) ('the Ordinance')
Regulator: The Data Protection Board, provided for under the Ordinance, has not yet been established.
Summary: Curaçao is a constituent country in the Kingdom of the Netherlands and its approach to data protection is influence by the Netherlands. Indeed, the Ordinance is modelled on Act Implementing the GDPR (official version available in Dutch here; unofficial English version available here), and sets out general principles governing the processing of personal data. Unlike the Netherlands, however, Curaçao has no requirements for data processing notifications, data protection officer appointments, or data breach notifications. The Ordinance regulates international data transfers and limits transfers to countries that provide an adequacy protection of personal data. Although Curaçao is a member of the Caribbean Financial Action Task Force ('CFATF'), it is viewed as having limited effective tax enforcement and anti-money laundering measures by international supervisory bodies.