{
  "node_id": "kn-dpa-2018",
  "title": "Saint Kitts and Nevis Data Protection Act 2018",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "Saint Kitts and Nevis enacted the Data Protection Act 2018, a CARICOM and OECS-aligned statute establishing a framework for the lawful processing of personal information. The Act is administered by a Data Protection Commissioner and establishes data protection principles covering fair collection, purpose limitation, data minimisation, accuracy, retention limits, security, and individual participation. Data subjects have rights of access and correction. Special categories of sensitive personal information are subject to explicit consent requirements. Cross-border transfers require adequate protection or appropriate safeguards. The Act extends to all organisations established in the Federation or processing personal information of persons in the Federation.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/kn-dpa-2018.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}