Antigua and Barbuda DPA
Data Protection Act, 2013 (No. 10 of 2013)
Key Facts
Overview
Antigua and Barbuda's Data Protection Act establishes a comprehensive framework with the Information Commissioner responsible for enforcement. The law features a dual penalty track, summary and indictable offenses, with escalating penalties for more serious violations.
What This Means for Your Website
- Consent is required prior to collecting or processing personal data of visitors from Antigua and Barbuda
- Data subjects must be informed about data usage and their rights
- Security measures against unauthorized access are required
- Serious violations can result in up to $100,000 fines and 5 years imprisonment
Key Requirements
The Information Commissioner enforces the DPA with dual penalty tracks: summary conviction (up to $50,000 and/or 3 years) and conviction on indictment (up to $100,000 and/or 5 years). Purpose limitation and data accuracy requirements apply.
How ConsentStack Handles This
ConsentStack applies consent-based processing for visitors from Antigua and Barbuda, meeting the DPA's requirements.
Penalties
Summary: up to $50,000 and/or 3 years. Indictment: up to $100,000 and/or 5 years imprisonment.
Key Requirements
- Consent prior to collecting or processing personal data
- Provide data subjects with information about usage and rights
- Implement security measures against unauthorized access
- Data subject rights: access, correction, deletion
- Purpose limitation for data processing
- Breach notification obligations
Notable Provisions
- Dual penalty track: summary vs. indictment
- Up to 5 years imprisonment for serious violations
- Information Commissioner as enforcement authority
Other Latin America & Caribbean Regulations
Frequently Asked Questions
Stay compliant with Antigua and Barbuda DPA
ConsentStack helps you implement Opt-in consent for Antigua and Barbuda automatically.