Jamaica: technology regulation at a glance

Framework: No dedicated virtual-asset law yet in force; FSC Jamaica and Bank of Jamaica Act govern the space; Virtual Assets Service Providers (VASP) Bill programmed for 2025/26 parliamentary session

Jamaica permits individuals and businesses to buy, sell, and hold crypto without an explicit ban, but the sector remains largely unregulated pending dedicated legislation. The government's VASP Bill, scheduled for parliamentary passage in the 2025/26 fiscal year, would introduce licensing requirements and consumer protections overseen by the Financial Services Commission (FSC). Jamaica separately launched JAM-DEX, a fully-backed CBDC legal tender, in 2022 that is distinct from private crypto.

Framework: National AI Policy under drafting (National AI Task Force recommendations, Feb 2025); Data Protection Act 2020; Supreme Court Practice Direction No. 1 of 2025

Jamaica has no standalone AI law in force but has completed foundational preparatory steps: a National AI Task Force delivered formal policy recommendations in February 2025, and the Government is now actively drafting a National AI Policy for Cabinet submission. Existing coverage for AI-adjacent issues comes from the Data Protection Act 2020 (automated decision-making rights) and a 2025 Supreme Court practice direction governing generative AI use in court proceedings.

Framework: Data Protection Act, 2020 (No. 7 of 2020), supervised by the Office of the Information Commissioner (OIC)

Jamaica enacted a comprehensive, GDPR-influenced Data Protection Act in June 2020, which came fully into force on 1 December 2023 after a phased commencement. The Office of the Information Commissioner (OIC) is the independent supervisory authority responsible for oversight, registration of data controllers, and enforcement. As of early 2026, data controller registration is operational but the OIC's formal enforcement powers have not yet been fully activated.

Framework: Payment Clearing and Settlement Act (PCSA) 2010 + Bank of Jamaica Guidelines for Electronic Retail Payment Services (ERPS 2, 2019); formal PSP licensing via proposed PCSA amendment (draft circulated January 2026, not yet enacted)

Jamaica's Bank of Jamaica (BOJ) authorises electronic retail payment service providers under administrative guidelines (ERPS 2, 2019) rather than a dedicated statutory licensing law, as the PCSA 2010 does not confer formal PSP licensing powers on the BOJ. A Bill amending the PCSA to establish a statutory licensing and supervisory regime for payment service providers has been drafted (last updated January 2026) but has not yet been enacted. In parallel, Jamaica operates a live retail CBDC (JAM-DEX) launched in 2022 and expanding through 2026.

Framework: Aliens Act and Immigration Restriction (Commonwealth Citizens) Act, administered by the Passport, Immigration and Citizenship Agency (PICA) and Ministry of Labour and Social Security (MLSS)

Jamaica has no dedicated digital nomad or remote-work visa in force as of 2026. Remote workers from many nationalities may enter visa-free for tourism (90-180 days depending on passport), but working remotely under tourist admission is not formally authorised. Standard work permits and permanent residence pathways via PICA exist, while a proposed Economic Residency Programme for investors and calls for a formal digital nomad programme remain unrealised.

Framework: Cybercrimes Act 2015 (as amended 2026); Data Protection Act 2020 / Office of the Information Commissioner; Broadcasting Commission of Jamaica (broadcast/VOD content)

Jamaica regulates online conduct primarily through the Cybercrimes Act 2015, most recently amended by the Cybercrimes (Amendment) Act passed by both houses in early 2026, which strengthens child protections and addresses AI-generated intimate imagery. The Data Protection Act 2020, fully enforceable since December 2023, covers personal-data handling by online entities. There is no comprehensive online-safety or platform-liability law comparable to the EU DSA or UK Online Safety Act; the government has signalled future social-media regulation for children but no specific legislation is yet enacted.

Framework: Cybercrimes Act 2015 (as amended 2026) + Data Protection Act 2020 + Jamaica Cyber Incident Response Team (JaCIRT) / National Cybersecurity Strategy 2015

Jamaica addresses cybersecurity through a combination of criminal law (the Cybercrimes Act 2015, substantively amended in 2026) and data-protection-based breach notification (the Data Protection Act 2020, fully enforced from December 2023). There is no single comprehensive NIS2-style cybersecurity statute imposing mandatory security requirements across all sectors; instead, obligations arise from the criminal code and data-protection regime, supported by the Jamaica Cyber Incident Response Team (JaCIRT) as the national coordination authority under the 2015 National Cybersecurity Strategy.

Framework: Companies Act (Jamaica), administered by the Office of the Registrar of Companies (ORC) / Companies Office of Jamaica (COJ), under the Ministry of Industry, Investment & Commerce (MIIC)

Jamaica permits 100% foreign ownership of companies in virtually all sectors with no formal investment screening mechanism. Company incorporation is available online through the ORC's electronic portal and typically completes within 1-3 business days. No minimum paid-up share capital is required for a private limited company, and registration fees are modest.