Cybersecurity law & regulation in Jamaica (2026)

Legal framework

Cybercrimes Act 2015 (as amended 2026) + Data Protection Act 2020 + Jamaica Cyber Incident Response Team (JaCIRT) / National Cybersecurity Strategy 2015

Key points: cybersecurity in Jamaica

1. 01Cybercrimes Act 2015 (as amended 2026)

   The foundational legislation criminalises unauthorised access, modification, and interception of computer systems, cyberstalking, fraud, malware distribution, and denial-of-service attacks. The Cybercrimes (Amendment) Act 2026, passed by both Houses of Parliament by May 2026, introduced harsher penalties for offences targeting minors (up to 20 years imprisonment), criminalised the manufacture/distribution of cyberattack tools, and expanded victim-compensation provisions.

   laws.moj.gov.jm jis.gov.jm jamaicaobserver.com

2. 02Data Protection Act 2020, breach notification duty

   The Data Protection Act 2020 became fully enforceable on 1 December 2023. Data controllers must notify the Office of the Information Commissioner (OIC) within 72 hours of becoming aware of a security breach that affects or may affect personal data, and must also notify affected data subjects without undue delay. Technical and organisational safeguards against unauthorised or unlawful processing are mandatory.

   japarliament.gov.jm myersfletcher.com oic.gov.jm

3. 03Office of the Information Commissioner (OIC)

   Established in December 2021 as the independent supervisory authority under the DPA, the OIC receives data-breach notifications from data controllers and oversees compliance with data-protection and security obligations. It is the primary enforcement body for the breach-notification regime.

   oic.gov.jm opm.gov.jm

4. 04Jamaica Cyber Incident Response Team (JaCIRT)

   JaCIRT, a division of the Ministry of Science, Energy and Technology, is the national cybersecurity coordination authority established under the 2015 National Cybersecurity Strategy. It coordinates responses to cyber threats across public and private sectors, develops cybersecurity standards and policies especially for government agencies and critical national infrastructure, and monitors compliance with those standards.

   cirt.gov.jm mset.gov.jm

5. 05National Cybersecurity Strategy 2015 and IDB-funded upgrade

   The 2015 National Cybersecurity Strategy remains the overarching policy framework, and Jamaica marked a decade of progress in 2025. The Inter-American Development Bank approved a US$6.5 million loan (plus US$3.5 million counterpart, total US$10 million) to modernise cybersecurity governance, enhance incident-response capabilities, and expand specialised professionals, pointing toward a potential future uplift of the legal framework.

   opm.gov.jm iadb.org

6. 06No comprehensive cybersecurity law (NIS2-equivalent)

   Jamaica does not yet have a dedicated, comprehensive cybersecurity statute imposing sector-wide security obligations, mandatory incident reporting to a cyber authority, or baseline resilience requirements comparable to the EU's NIS2 Directive. Security obligations for non-personal-data incidents and for critical-infrastructure operators rely on JaCIRT guidance rather than binding statutory requirements.

   dataguidance.com coe.int

Timeline of decisions

1. 3 Jun 2026Guidance
   49 Million Attacks Prompt Announcement of New Comprehensive Cybersecurity Law

   Minister Andrew Wheatley announced in the House of Representatives that Jamaica will draft a new standalone cybersecurity law after recording over 49 million attempted attacks in 2025. The planned legislation will codify a National Cybersecurity Directorate, mandate minimum sector standards, require incident reporting, regulate cybersecurity service providers, and formally designate critical information infrastructure, obligations not currently in statute.

   Jamaica Observer

2. 1 May 2026Law
   Senate Passes Cybercrimes (Amendment) Act 2026

   The Senate passed amendments to the Cybercrimes Act 2015, with Senator Tavares-Finson declaring they confront 'real and growing dangers' of digital crime and are essential for building societal trust in digital systems. Amendments expand child-online protections and broaden prosecutorial tools for law enforcement.

   Jamaica Gleaner

3. 4 Feb 2026Law · official
   House of Representatives Passes Cybercrimes (Amendment) Act

   Parliament's lower house passed amendments strengthening child-protection provisions, expanding law-enforcement investigative tools, and introducing liability for persons who knowingly allow their property to be used for cybercriminal activity, with penalties up to 15 years' imprisonment. Definitions were modernised to reflect digital-platform harm.

   Jamaica Information Service

4. 1 Sept 2025Decision · official
   IDB/USAID US$10 Million 'Strengthening Cybersecurity in Jamaica' Project Commences

   The Inter-American Development Bank-financed project (JA-L1093), co-funded with USAID, commenced a six-year programme to implement a national critical-infrastructure protection strategy, bolster JaCIRT's incident-response capacity, and integrate cybersecurity education from primary school through university accreditation standards.

   Inter-American Development Bank

5. 1 Nov 2023Incident
   Financial Services Commission Hit by Ransomware Attack

   Jamaica's Financial Services Commission, the non-bank financial-sector regulator, suffered a ransomware attack in late 2023, one of the most prominent breaches of a public regulatory body. The incident underscored the absence of mandatory incident-reporting requirements and drove calls to accelerate cybersecurity legislation.

   Jamaica Observer

6. 27 Jun 2023Incident · official
   Government Confirms JamaicaEye Surveillance Portal Breach

   Minister Chang issued an official press release confirming a breach of the government's JamaicaEye platform and simultaneous attacks on at least one financial institution, and outlined active mitigation measures. This was the first high-profile public confirmation of a successful cyberattack against a national government platform.

   Ministry of National Security Jamaica

7. 1 Jan 2016Decision · official
   Jamaica Cyber Incident Response Team (JaCIRT) Declared Fully Operational

   JaCIRT was declared fully equipped and operational in January 2016, having operated remotely since August 2015. Established with ITU and OAS/CICTE technical assistance, it became Jamaica's lead national agency for coordinating cyber-incident response, issuing government-wide threat advisories, and monitoring threats to government IT resources.

   Jamaica Information Service

8. 13 Oct 2015Law · official
   Cybercrimes Act 2015 Passed, Replaces 2010 Legislation

   Parliament passed the Cybercrimes Act 2015 (Act No. 31 of 2015), repealing and replacing the 2010 Act. The new law added offences for computer-related fraud and forgery, malicious communications, and unauthorised disclosure of investigations, and mandated a legislative review by 2018. It remains Jamaica's principal cybercrime statute.

   Laws of Jamaica — Ministry of Justice

9. 28 Jan 2015Guidance · official
   National Cyber Security Strategy 2015 Launched

   Jamaica launched its first National Cyber Security Strategy at the Jamaica Pegasus Hotel, co-hosted with the OAS, establishing five strategic pillars, Protect, Deter, Build, Partner, Govern. The strategy directed creation of JaCIRT, a national governance framework, and a legislative modernisation agenda, forming the policy backbone of all subsequent cybersecurity activity.

   Organization of American States

10. 1 Jan 2010Law · official
    Cybercrimes Act 2010 Enacted, Jamaica's First Cybercrime Statute

    Jamaica enacted its inaugural cybercrime law, creating criminal sanctions for misuse of computer systems and electronic transactions. Though subsequently replaced by the 2015 Act, the 2010 legislation established Jamaica as one of the first Caribbean nations with a dedicated cybercrime framework and provided the prosecutorial foundation for early enforcement actions.

    Council of Europe Octopus Cybercrime Community

Sources

1. 1.laws.moj.gov.jm/library/statute/the-cybercrimes-act
2. 2.japarliament.gov.jm/attachments/article/339/The%20Data%20Protection%20Act,%202020.pdf
3. 3.jis.gov.jm/senator-passes-cybercrimes-amendment-act/
4. 4.jamaicaobserver.com/2026/02/04/house-passes-legislation-strengthen-cybercrime-framework/
5. 5.oic.gov.jm/page/things-you-need-know
6. 6.opm.gov.jm/the-office-of-the-information-commissioner/
7. 7.cirt.gov.jm/page/about-cirt-division
8. 8.mset.gov.jm/wp-content/uploads/2019/09/Jamaica-National-Cyber-Security-Strategy-2
9. 9.opm.gov.jm/jamaica-marks-a-decade-of-progress-in-cybersecurity-as-national-strat
10. 10.iadb.org/en/news/idb-finances-project-strengthen-jamaicas-cybersecurity
11. 11.myersfletcher.com/responding-to-a-data-breach-in-jamaica/
12. 12.dataguidance.com/jurisdictions/jamaica
13. 13.coe.int/en/web/octopus/country-wiki-ap/-/asset_publisher/CmDb7M4RGb4Z/content