Is a listed company, in Saint Kitts and Nevis

Data Protection Act, 2018, ss. 23-38 (Information Commissioner, enforcement and offences) · Read the law's page

• Furnish the Information Commissioner with access to personal data, documentation of its processing, or information about its security, in writing within the time an information notice specifies.
• Comply with an enforcement notice the Information Commissioner serves within the time it states, and notify the data subject and anyone the data was disclosed to in the twelve months before the notice, within thirty days of complying, if compliance materially modifies the data.
• Do not obstruct the Information Commissioner or an authorised officer in the conduct of their duties.
• Do not dismiss, suspend, demote, discipline, harass, or otherwise disadvantage an employee for reporting or refusing to participate in a contravention of the Act in good faith.
• Do not wilfully disclose personal information in contravention of the Act, or collect, store, or dispose of personal information in a manner that contravenes the Act.