Support Centre

Saint Lucia


Law: Data Protection Act 2011 ('the Act') and the Data Protection (Amendment) Act 2014 ('the Amendment Act')

Regulator: The Data Protection Commissioner

Summary: The Act establishes data protection principles that provide a comprehensive basis for the collection, processing, and use of personal data. The Act provides for obligations for data controllers, such as data processing notifications and detailed rights of access processes. In addition, the Act established the Data Protection Commissioner ('the Commissioner') and provided it with a wide range of powers, particularly in relation to investigations. The Amendment Act mostly implemented technical changes, however it also introduced privacy impact assessments, the exercise of which may be requested from a government department by the Commissioner, and provided further protections for those who notify the Commissioner of possible violations of the Act.