Online Registration Only for Data Controllers

Information Commissioner, Celia Barclay, is reminding data controllers that the organisation is only accepting online registrations through the My OIC portal on its website.

“We are trying to move towards the digital economy that Jamaica wants to create, and we aim to make this process as simple and as easy as possible to have our business functions automated and to ensure that our records are kept in electronic form. And so, for that reason, an online application must be made,” Ms. Barclay said while speaking on the JIS TV Get the Facts programme recently.

Organisations and individuals who process the personal information of others can access the portal on any device with an Internet connection to register as data controllers, as prescribed by the Data Protection Act (DPA) 2020.

Applications are currently being accepted for the December 1, 2023 to November 30, 2024 period.

Initially, the registration was scheduled to begin on December 1, 2023, the official implementation date of the legislation.

However, the Government granted a six-month grace period for entities to become complaint.

Ms. Barclay reminded persons that they have up to 30 days to complete their registration after starting the process online.

For his part, the entity’s Information Systems Manager, Ronald Frue, emphasised that the organisation is only facilitating manual entry of information in the registration process.

“We understand that persons will employ the services of data protection practitioners who might use programmes or software to gather information on behalf of the data controller. However, while that is beneficial to controllers, and we understand the need to do that, you are required to complete the registration process manually (type the information) using the My OIC portal,” Mr. Frue explained.

He added that there will be no integration of third-party applications with the OIC platform at this time and pointed out that only general information on data controllers’ practices and processing activities is required to complete the registration process.

Data controllers who encounter challenges in becoming compliant are encouraged to reach out to the OIC for assistance.

The Office of the Information Commissioner is responsible for overseeing compliance with the Data Protection Act in Jamaica.

Its mission is to build confidence in the protection of individuals’ privacy rights through the robust implementation of the Data Protection Act.