🇰🇳Data Protection Act, 2018
← Back to laws in Saint Kitts and Nevis
Data Protection Act, 2018
The Act establishes general, notice and choice, disclosure, security, retention, integrity and access principles. It also creates access and correction procedures and assigns functions to the Information Commissioner.
Not yet treated as operative
The enacted text states that it comes into force on a day fixed by the Minister by Gazette Order. VDPO did not identify an official commencement order as at 27 August 2026. Every checklist item is therefore labelled readiness-only.
Distinctive readiness points
Private-body coverage is tied to commercial transactions. A non-established person using equipment in Saint Kitts and Nevis must prepare to appoint a local representative. The access process uses a thirty-day period, subject to the statutory extension and refusal rules.