Sends commercial email, in Jamaica

Data Protection Act, 2020 (Act 7 of 2020), ss. 5-11 and 13 · Read the law's page

• Answer a data subject's written access request promptly and in any event before the end of 30 days, saying free of charge whether you process their personal data and describing that data, the purposes of the processing and the recipients.
• Give the data subject, on payment of the prescribed fee, their personal data in an intelligible form together with any information you hold as to its source, or, where technically feasible, transmit it to another data controller in a structured, commonly used and machine-readable format.
• Identify in writing, within 30 days of the request, the provision you rely on where you refuse to disclose personal data to the data subject.
• Give a written statement within 21 days to a person who requires you to cease processing that causes substantial unwarranted damage or distress, saying whether you will comply and, where you will not, why.
• Determine within 30 days of a rectification request whether the personal data is inaccurate, correct it where it is, and give notice to the individual and to everyone the data was disclosed to in the preceding twelve months.
• Do not process personal data for direct marketing unless the data subject consents or is your customer, and do not approach the same data subject for that consent more than once.
• Carry in every direct marketing communication the identity of the sender and an address or other contact details the recipient can use to ask that the communication cease.