Compliance Node Overview
Saint Kitts and Nevis enacted the Data Protection Act 2018, a CARICOM and OECS-aligned statute establishing a framework for the lawful processing of personal information. The Act is administered by a Data Protection Commissioner and establishes data protection principles covering fair collection, purpose limitation, data minimisation, accuracy, retention limits, security, and individual participation. Data subjects have rights of access and correction. Special categories of sensitive personal information are subject to explicit consent requirements. Cross-border transfers require adequate protection or appropriate safeguards. The Act extends to all organisations established in the Federation or processing personal information of persons in the Federation.
Pillar: Cybersecurity · Authority: Data Protection Commissioner, Saint Kitts and Nevis · Version: 1.0.0 · Last updated:
Primary source: https://www.gov.kn
SHA-256 integrity: db4231c3888c5cb61aa65740bc98444259324c80a893656cbf5721e93af3befd
Primary Citations — 5 traced to source
- Saint Kitts and Nevis Data Protection Act 2018, National Assembly of Saint Kitts and Nevis
- CARICOM Model Legislative Framework on Data Protection, Caribbean Community Secretariat
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.