Sections 4 + 44 + 46 of the Jamaica Data Protection Act 2020 establish the framework for public authority processing + exemptions + and data subject rights limitations. (1) Section 4 General Exemptions: (a) Personal/Household Activity - processing by individuals in course of personal or household activities; (b) Journalism + Literary + Artistic Purposes - subject to specific conditions + public interest test; (c) National Security - protection of national security; (d) Defence + Armed Forces; (e) Prevention + Detection + Prosecution of Crime + Apprehension of Offenders; (f) Tax Administration + Revenue Collection; (g) Public Sector Health + Social Welfare; (h) Legal Privilege + Judicial Proceedings; (i) Research + Statistics + Archival Purposes (subject to safeguards). (2) Section 44 Intelligence Services Processing: (a) limited exemption for intelligence agencies (Jamaica Defence Force + Jamaica Constabulary Force Intelligence + Financial Investigations Division); (b) exemption from specific Standards/rights to extent necessary for proper performance; (c) safeguards including (i) oversight by Parliamentary Committee on National Security; (ii) judicial authorisation for intrusive measures; (iii) periodic review; (iv) NOT carte blanche - proportionality + necessity test applies; (d) emerging Jamaica Intelligence Services oversight framework. (3) Section 46 Data Subject Rights Limitations: (a) circumstances where data subject rights may be limited; (b) measures must (i) respect essence of rights and freedoms; (ii) constitute necessary and proportionate measure in democratic society; (iii) safeguard - (1) national security; (2) defence; (3) public security; (4) prevention/investigation/detection/prosecution of crime; (5) public interests including economic + financial; (6) judicial independence + proceedings; (7) breaches of ethics for regulated professions; (8) monitoring + inspection + regulatory functions; (9) data subject protection + others; (10) enforcement of civil law claims; (c) specific limitations on - access + correction + erasure + portability + restriction + objection. (4) Crime Prevention Specific: (a) law enforcement processing per Section 4(c); (b) Jamaica Constabulary Force + Independent Commission of Investigations (INDECOM) + Major Organised Crime and Anti-Corruption Agency (MOCA); (c) FATF AML/CFT obligations; (d) information sharing per Section 26 Sub-Inter-Agency provisions; (e) emerging surveillance jurisprudence + Charter Section 13(3)(j). (5) Research + Statistics + Archival per Section 41: (a) special rules permitting processing for scientific + historical research + statistical + archival in public interest; (b) appropriate safeguards required - (i) data minimisation + anonymisation + pseudonymisation where possible; (ii) access restriction; (iii) Section 5 sensitive data additional safeguards; (iv) NO decision-making about data subject solely on research basis; (c) Section 41 rights modifications - access + correction + erasure subject to qualifications. (6) Journalism + Literary + Artistic Exemption: (a) Section 4 + Article 13 Constitution Section 13(3)(c) freedom of expression balance; (b) public interest test; (c) responsible journalism standard; (d) protection of sources; (e) Editor's Code of Conduct + Press Association of Jamaica self-regulation; (f) Jamaica defamation law balance. (7) Public Authority Cybersecurity per Section 35: (a) public sector security must be appropriate; (b) Government-wide cybersecurity framework; (c) Jamaica Cyber Incident Response Team (Ja-CIRT); (d) Critical National Information Infrastructure (CNII); (e) Sector-specific - Banking (FSC + BoJ) + Telecommunications (OUR) + Health (Ministry of Health) + Education (Ministry of Education). (8) Government Data Sharing: (a) inter-agency MOUs; (b) Section 26 controller-controller arrangements; (c) Identity Management - Jamaica National Identification and Registration Act + replacement legislation; (d) Government Service Delivery + One-Stop-Shop emerging; (e) digital government + e-citizenship. (9) Accountability + Transparency: (a) public sector subject to Access to Information Act 2002 + transparency obligations; (b) Open Data initiatives; (c) Parliamentary oversight; (d) Auditor General; (e) Citizens' Rights Council (CRC); (f) Office of the Public Defender. (10) Implementation + Penalties: (a) public bodies subject to OIC supervision; (b) Section 50 administrative penalties apply (subject to Crown immunity limitations); (c) Ministerial responsibility; (d) reputational + political consequences. Coordinates with EU GDPR Article 23 + Article 89 + Law Enforcement Directive 2016/680 + UK DPA 2018 Schedule 11 + Convention 108+ + Jamaica Charter of Fundamental Rights and Freedoms 2011 Section 13 + Jamaica Constitution Section 16 + Access to Information Act 2002 + Jamaica Defence Force Act + Jamaica Constabulary Force Act + MOCA Act + FATF Recommendations + emerging Caribbean Community surveillance jurisprudence. Jamaica DPA 2020 Sections 4 + 44 + 46 + 41 applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.