{
  "node_id": "bb-dpa-2019",
  "title": "Barbados Data Protection Act 2019",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "Barbados enacted the Data Protection Act 2019, a GDPR-aligned statute administered by the Data Protection Commissioner. It mandates lawful bases for processing, grants data subjects rights of access, rectification, erasure, portability, restriction, and objection, and requires data breach notification to the Commissioner within 72 hours of becoming aware of a breach likely to result in high risk. Cross-border transfers require adequate protection or approved safeguards. Registration of certain processing operations with the Commissioner is required. The Act applies to all controllers established in Barbados and to controllers outside Barbados processing personal data of persons in Barbados.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/bb-dpa-2019.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}