Cybersecurity law & regulation in Dominica (2026)
Cybersecurity in Dominica: sectoral rules.
Dominica's cybersecurity regime is piecemeal and sector-specific, anchored primarily by the Electronic Transactions Act 2013 which criminalises unauthorised access, electronic fraud, and related offences, supplemented by the Electronic Evidence Act and Data Protection Act 2011. There is no comprehensive, standalone national cybersecurity law. Dominica is actively building foundational cyber capacity, including establishing a national CSIRT and developing a cybersecurity awareness strategy, under the World Bank-funded Caribbean Digital Transformation Project (CARDTP), but formal incident-reporting and breach-notification obligations are not yet codified in dedicated legislation.
Legal framework
Electronic Transactions Act 2013 (Act 19 of 2013); Electronic Evidence Act; Data Protection Act 2011; regional ECTEL framework
Key points: cybersecurity in Dominica
Primary Cybercrime Statute
The Electronic Transactions Act 2013 (Act 19 of 2013) is the principal instrument governing electronic offences including unauthorised system access and electronic fraud. It also provides the legal basis for electronic signatures and records.
No Comprehensive Cybersecurity Law
Dominica has no NIS2-style or standalone national cybersecurity statute. A 2014 legislative review workshop assessed compliance with the Budapest Convention on Cybercrime and initiated steps toward a national cybercrime strategy, but no comprehensive law has been enacted as of 2026.
CSIRT Establishment In Progress
Under CARDTP (World Bank-funded), Dominica hosted CSIRTAMERICA Week training (September 2024) to build capacity for a National Cybersecurity Incident Response Team. The CIRT is not yet fully operational; a roadmap was developed by NRD Cyber Security (Lithuania) contracted through the OECS Commission.
ECTEL Regional Regulatory Oversight
The Eastern Caribbean Telecommunications Authority (ECTEL), of which Dominica is a contracting state, provides regional regulatory oversight of electronic communications including cybersecurity aspects. A governance and legislative framework review for ECTEL member states is ongoing.
No Formal Breach-Notification Duty
Dominica's legislation does not yet contain standalone mandatory breach-notification or incident-reporting obligations for the private sector or critical infrastructure operators. The Data Protection Act 2011 provides general data handling rules but lacks explicit breach-notification timelines.
Public Awareness and Strategy Development
The Government of Dominica issued a Request for Expression of Interest for consultancy services to develop a public awareness campaign on cybercrime and cybersecurity, indicating strategy-building is still at an early institutional stage.
Sources
- dominica.gov.dm/laws/2013/Electronic%20Transactions%20Act,%202013%20Act%2019%20of%202
- dominica.gov.dm/laws-of-dominica
- news.gov.dm/news/1976-dominica-takes-steps-to-fight-cybercrime
- emonewsdm.com/the-caribbean-digital-transformation-project-conducts-four-day-traini
- cybilportal.org/projects/dominica-national-cirt-assessment/
- dominica.gov.dm/notices/request-for-expression-of-interest-and-terms-of-reference-con
- dominica.gov.dm/notices/consulting-services-for-the-review-of-the-ectel-governance-le
- pressroom.oecs.int/new-plans-for-improved-cybersecurity-in-the-oecs-with-caribbean-digit
- dpocaribbean.com/cybercrime-laws
Next for Dominica: Starting a BusinessEasy
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026