The Barbados Data Protection Act (2019) Is Not a Form You File Once
It is an operating obligation. We turn it into a documented, tracked programme — so when the Commissioner, an auditor, or a customer asks what you do with personal data and how you know it works, you have an answer on file.
A Privacy Notice Is Not a Programme
The Act has been enforceable since 2021, with penalties reaching $500,000. Most Caribbean organisations have a privacy notice and little else — no record of processing, no defined controller and processor roles, no evidence trail. A policy that no one operates does not survive a complaint or an audit.
What Readiness Actually Means
We assess where you stand against the Act, close the gaps, and stand up the records and routines that keep you compliant as your business changes.
• Gap assessment against the Act's principles and obligations
• Documented controller and processor roles and responsibilities
• Records of processing, retention schedules, and a data inventory
• Consent, privacy-notice, and data-subject-request handling that works in practice
• Breach detection, response, and notification readiness
• Independent reporting your board and auditors can use
Who This Is For
FSC- and CBB-regulated firms, credit unions, offshore corporate-services providers, hotels handling guest data, and any Barbados organisation that collects personal data and cannot evidence how it is protected.
Why Total 360 Security Barbados
DPA readiness is one pillar of an integrated operating model. The same operator that documents your obligations also enforces the technical controls behind them — identity, access, encryption, backup, and monitoring — so compliance is operational, not theoretical. What you can't document, you can't defend.
The DPA 2019 Readiness Checklist
A one-page checklist of the safeguards required of DPA 2019, with space to mark which controls you currently have. Designed to be completed by your leadership team and reviewed with your IT provider or counsel. Free. No sales call required to download.