{
  "node_id": "bs-dpa-2003",
  "title": "Bahamas Data Protection (Privacy of Personal Information) Act 2003",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "The Bahamas enacted the Data Protection (Privacy of Personal Information) Act, 2003 (Chapter 324A), one of the earliest comprehensive data protection statutes in the Caribbean. The Act is administered by the Data Protection Commissioner of The Bahamas. It establishes data protection principles governing the collection, use, storage, and disclosure of personal data by data controllers. Data subjects have rights of access and correction. Controllers must notify data subjects of the purposes for which personal data is collected, implement appropriate security measures, and restrict cross-border transfers to countries with adequate data protection. The Act aligns with CARICOM privacy standards and influenced subsequent data protection legislation across the Caribbean Community.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/bs-dpa-2003.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}