To varying degrees, Caribbean countries are grappling with the issue of privacy and data protection. Countries that have more recent frameworks have been struggling to fully operationalise all of the provisions, whilst there are others that have not adopted current best practice in the space. With information privacy specialists, Allison James of Barbados, and Rishi Maharaj of Trinidad and Tobago, we explore privacy and data protection trends and developments across the Caribbean region. During our conversation, we discuss: how privacy and data protection have evolved over the past few years; the current status of regulatory enforcement; areas of divergence or contradiction that multinational companies operating across the Caribbean must navigate; and trends or emerging developments that the Caribbean region may need to consider.

 

This episode is also available on SoundCloud, Apple Podcasts, Spotify and Amazon Music.

With information privacy specialists, Allison James of Barbados, and Rishi Maharaj of Trinidad and Tobago, we explore privacy and data protection trends and developments across the Caribbean region. During our conversation, we discuss: how privacy and data protection have evolved over the past few years; the current status of regulatory enforcement; areas of divergence or contradiction that multinational companies operating across the Caribbean must navigate; and trends or emerging developments that the Caribbean region may need to consider.

Over the past decade, privacy and data protection have become increasingly important worldwide, which is being reflected to varying degrees in the Caribbean region. Some countries have enacted recent laws that are aligned with the European Union’s General Data Protection Regulation (GDPR), which is widely considered a persuasive model, while others in the region are either relying on older pieces of legislation or have no data protection laws in place.

However, the digital landscape continues to evolve. Just a few years ago, the focus was on social media and online platforms that engaged in invasive tracking of their customers, or were selling or otherwise using customers’ personal data in ways that had not been envisaged. However, now, there are also concerns about the impact of cybersecurity and artificial intelligence, for example, on privacy and data protection.

In this podcast episode, we will be discussing the state of privacy and data protection across the Caribbean region, along with emerging trends and practices of which we should be aware.

 

Allison James

Introducing our guests

Allison James is a digital trust professional who bridges the gaps between people, processes, and technology to help organisations thrive in today’s complex digital environment. She is a Certified Information Systems Auditor, a Certified Information Privacy Professional and a Fellow Chartered Certified Accountant, based in Barbados.

As a chartered accountant with a foundation in technology risk management, IT governance, cybersecurity, and data privacy, Allison guides clients in building digital ecosystems that are not only resilient and secure but also strategically aligned with their business goals. She thus empowers organisations to confidently embrace change, ensuring that innovation is balanced with robust controls and sustainable practices. 

 

Rishi Maharaj

Rishi Maharaj is a regional practitioner in data protection and AI governance with experience across government, industry, and international institutions. He has contributed to legislative development in Trinidad and Tobago, including work on the Electronic Transactions Act, Data Protection Act, and Freedom of Information Act, and has supported governance projects with the Inter-American Development Bank.

As Founder and Chief Executive Officer of Privicy Advisory Services, he acts as External Group Data Protection Officer for a major Caribbean insurance and financial services group and has directed compliance initiatives for organisations such as NCB Jamaica, the Guardsman Group (Jamaica and Barbados), multiple public bodies in Jamaica, and several insurance and medical entities in Trinidad and Tobago. He holds IAPP certifications (CIPM, CIPP/E) and is an accredited AI Governance Architect, with core expertise in GDPR, Caribbean data protection regimes, and the design of responsible AI governance frameworks.

 

Insight into our conversation

The privacy and data protection space not only has to adjust to the technological developments that are occurring, but also to changes in the regulatory posture that are occurring. From a regional perspective, and noting continuing efforts to realise the CARICOM Single Market and Economy, having harmonised privacy and data protection legislation and regulations is becoming increasingly vital. However, as was noted earlier, a wide variety of data protection policies have been implemented across the region that could hinder deeper regional integration efforts if left unattended.

Below are questions that drove the conversation with Allison and Rishi.

  1. From your vantage point, please give us a sense of how privacy and data protection have evolved over the past few years.
  2. What is the current status of regulatory enforcement? Are the data protection authorities fully operational, well-resourced, and actively issuing sanctions or guidelines, and what is the general timeline for their maturity?
  3. Given the varying Data Protection Acts across the region (e.g., Jamaica, Barbados, Cayman Islands), what are the two or three most significant areas of divergence or contradiction that multinational companies operating across the Caribbean must navigate?
  4. How is the Caribbean region evolving its approach to linking data privacy compliance with cybersecurity measures?
  5. Based on where the world is going globally, what are some trends or emerging developments that the region may need to consider regarding privacy and data protection?

 

We would love to hear your thoughts!

Do leave us a comment either here beneath this article, or on our Facebook or LinkedIn pages, or via Twitter, @ICTPulse.

Also, if you or a member of your network is interested in joining us for an episode, do get in touch.

Let’s make it happen!

 

Select links

Below are links to some of the organisations and resources that were mentioned during the episode, or might otherwise be useful:

 

 

Images credit:  A James;  R Maharaj; Freepik;  rawpixel.com (Freepik);  8photo (Freepik);

Music credit: The Last Word (Oui Ma Chérie), by Andy Narrell

Podcast editing support: Mayra Bonilla Lopez