KINGSTON, Jamaica — Jamaica’s ambition to build a robust national data protection regime has hit multiple unforeseen roadblocks, with a shortage of willing qualified retired high court judges emerging as a key bottleneck for the critical Data Protection Oversight Committee, Science, Technology and Special Projects Minister Dr Andrew Wheatley has confirmed. The minister shared the update during his June 3 address to the House of Representatives’ Sectoral Debate, where he also detailed long-running delays in activating the full mandate of the Office of Information Commissioner (OIC) — the country’s national data regulator established under the 2020 Data Protection Act.
On the Oversight Committee front, Wheatley told legislators that all other member selections are complete, with final approvals nearing conclusion. But he pulled no punches on the root cause of the holdup: a legislative mandate requiring the panel to include a retired High Court Justice, a requirement designed with good intentions that has created an unexpected logjam. “Finding a willing and qualified retired Justice proved far more difficult than the law assumes, and I want to signal to this House that this warrants legislative review,” Wheatley told the chamber. “The current formulation places the timeliness of a critical governance appointment at the mercy of a very small pool of eligible candidates.”
Despite the implementation delays, the minister emphasized that the 2020 Data Protection Act remains one of the most transformative pieces of legislation passed by the current administration. The law lays out the foundational framework for how personal data is collected, used and safeguarded across Jamaican institutions, and established the OIC as the independent body to oversee industry compliance. “It is a law we should be proud of,” Wheatley noted.
Even so, the minister was direct with parliament about a persistent gap: five years after the legislation was passed, its core enforcement provisions remain unactivated. These are the very rules designed to hold data controllers accountable and protect the personal information of every Jamaican whose data is collected and processed by public and private entities.
Wheatley explained that the delay stems from deep structural shortcomings in the OIC’s original interim setup, which was never resourced to match the full scope of the regulator’s mandate. Key functional roles were left unaccounted for, overall staffing levels sit far below required thresholds, and core leadership positions lack the specialized technical training needed to carry out effective compliance oversight.
While the OIC has made incremental progress with its limited resources, building out foundational frameworks and expanding public education campaigns around data protection rights, Wheatley stressed that outreach alone cannot replace formal regulation. “Awareness without enforcement is not regulation. It is education,” he said.
To address these gaps, the government has now approved the full budget the OIC requested for the current financial year, unlocking the resources the regulator needs to begin long-overdue internal restructuring. A dedicated OIC Data Protection Working Group has also been formally established, bringing together cross-sector experts in technology, law and operational management to guide the restructuring process and speed up preparations for full enforcement. Restructuring work is already ongoing, the minister confirmed.
With budget secured, the working group active, and Oversight Committee appointments in their final stage, the OIC is now on a clear trajectory to become the fully functional, technically proficient enforcement-ready national regulator it was originally envisioned to be, Wheatley said. Once the body is fully operational, the Data Protection Act’s enforcement provisions will be activated, requiring all data controllers to register, meet compliance standards, and face consequences for failing to protect user data.
“Jamaicans who trust organisations with their personal data have a right to expect that trust to be protected — not just in law, but in practice,” Wheatley added.