Duty LXD-1273
Processes biometric data, in Barbados
Data Protection Act, 2019, reach over scraped personal datasince 3 lines
Data Protection Act, 2019 (Act 2019-29) · Read the law's page
- Establish a lawful basis before collecting or processing personal data scraped from a public Barbadian website; public availability is not itself an exemption.
- Do not scrape or otherwise process a biometric identifier unless the data subject consents or a specific statutory ground applies.
- Before moving scraped personal data outside Barbados, confirm an adequate level of protection or an appropriate safeguard.
Data Protection Act, 2019, a child's consent and sensitive personal datasince 4 lines
Data Protection Act, 2019, ss. 8-9 (child's consent and sensitive personal data) · Read the law's page
- Do not process sensitive personal data, including biometric data, unless the data subject consents or a specific statutory ground applies.
- Process a child's personal data only where consent is given or authorised by the child's parent or guardian, a child being a person under the age of 18.
- Make reasonable efforts to verify that the consent to process a child's personal data was given or authorised by a parent or guardian, taking available technology into account.
- Where you rely on the not-for-profit or equality-monitoring grounds in section 9, carry the processing out with appropriate safeguards for the rights and freedoms of data subjects, and do not disclose the data to a third party without the data subject's consent.