The Office of the Information Commissioner (OIC) established by the Jamaica Data Protection Act 2020 Sections 6-15 + Schedule serves as Jamaica's independent supervisory authority for data protection. (1) Section 6 Establishment of the Office: (a) Office of the Information Commissioner established as independent body corporate; (b) located in Jamaica; (c) reports annually to Parliament; (d) has perpetual succession + common seal; (e) may sue and be sued in own name. (2) Section 12-13 Independence + Appointment: (a) Commissioner appointed by Governor-General on advice of Prime Minister after consultation with Leader of Opposition; (b) Term 5 years renewable once; (c) Independence guaranteed - no direction from Minister on operational matters; (d) Removal only for cause + Parliament approval; (e) Salary determined by Parliament; (f) supported by Deputy Commissioner + staff. (3) Section 8 Functions: (a) advise + recommend on data protection matters; (b) monitor + enforce compliance; (c) investigate complaints; (d) examine + audit controllers + processors; (e) issue codes of practice + guidance; (f) maintain Register of Controllers per Section 16; (g) issue + revoke registration; (h) impose administrative penalties per Section 50; (i) cooperate with international counterparts; (j) educate the public; (k) make orders to controllers/processors; (l) approve SCCs + BCRs + Codes of Conduct. (4) Section 10 Powers: (a) require production of information + documents; (b) enter premises (with warrant or in case of emergency); (c) interview persons; (d) seize evidence (with judicial authorisation); (e) issue orders for compliance + cessation; (f) impose administrative penalties up to JMD 10 million per violation; (g) refer for criminal prosecution per Sections 31-33; (h) issue restraining orders; (i) approve transfers + adequacy mechanisms. (5) Section 16-17 Registration: (a) controllers required to register with OIC per Section 16; (b) Registration Application includes details of controller + DPO + purposes + categories + recipients + transfers + security measures + retention; (c) Section 17 Certificate of Registration issued; (d) Annual renewal; (e) Material change notification within 30 days; (f) Fees per Schedule; (g) Failure to register - administrative penalty + possible criminal offence per Section 32. (6) Section 14 Data Protection Officer (DPO): (a) controller/processor MAY be required to appoint DPO; (b) qualifications include expertise in data protection + ICT; (c) reports directly to highest management level; (d) protected from dismissal for performing DPO duties; (e) DPO contact details in Section 22 Privacy Notice; (f) DPO collaborates with OIC. (7) Section 29 Data Protection Council: (a) advisory body to OIC; (b) chaired by Information Commissioner; (c) members include - sector regulators + civil society + academic + private sector + consumer protection; (d) advisory on standards + sectoral guidance + codes of conduct; (e) public consultation on regulations. (8) Section 15 Funding: (a) Parliamentary appropriations; (b) registration fees + administrative penalties retained; (c) grants + donations; (d) revenue for technical advisory services. (9) International Cooperation: (a) Caribbean Privacy Authorities Network; (b) Global Privacy Assembly observer/member status; (c) bilateral arrangements with Commonwealth + EU + US + UK; (d) mutual assistance + cross-border investigation cooperation; (e) capacity building from international donors. (10) Investigation + Enforcement Procedure: (a) complaint receipt + admissibility check; (b) preliminary investigation; (c) formal investigation + evidence gathering; (d) interim measures; (e) provisional findings + right to respond; (f) final decision + reasoning; (g) penalty determination + proportionality; (h) appeal to Data Protection Tribunal then High Court. Coordinates with EU GDPR Articles 51-59 + UK DPA 2018 Information Commissioner + Convention 108+ + Caribbean Privacy Authorities Network + Global Privacy Assembly + Jamaica Constitution Section 13(3)(j) + Jamaica Charter of Fundamental Rights and Freedoms 2011 + Jamaica Access to Information Act 2002. Jamaica DPA 2020 OIC + Sections 6-15 applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.