Resources / Data Protection Procedures

Appendix 5 – Data Protection Legislation in countries with UWI Global Centres

Country Legislation
Canada The Personal Information Protection and Electronic Documents Act (PIPEDA)(revised May 2019)
China Personal Information Protection Law (PIPL) (2021) – took effect November 1, 2021
Columbia
  • Articles 15 and 20 – Columbian Constitution (the right to privacy and the right to data rectification)
  • Statutory Law 1266 (2008) (Law 1266) (basic data processing principles, data subject rights, data controller obligations and specific rules for financial data)
Cuba No legislation
England Data Protection Act (2018)
Italy General Data Protection Regulation (Regulation (EU) 2016/679 ‘GDPR’)
Nigeria Nigeria Data Protection Regulation (2019)
Scotland General Data Protection Regulation (Regulation (EU) 2016/679 ‘GDPR’) and Data Protection Act (2018)
South Africa The Protection of Personal Information Act, 2013 (POPIA) (Act 4 of 2013) – took effect on July 1, 2020 (1 year grace period up to June 2021)
USA No single principal Data Protection Legislation in the US. Most applicable to us (SUNY-UWI collab) the New York Privacy Act. Not yet passed.

Data Protection Legislation and Authorities in Countries with UWI Global Centres

Country Data Protection Authorities
Canada Daniel Therrien
Privacy Commissioner of Canada
Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec
K1A 1HE
Email: genaral@oid-ci.gc.ca
China None yet
Columbia Andrés Barreto
Superintendent of Industry and Commerce (SIC)
Ministry of Commerce, Industry and Tourism
Website: www.sic.gov.co
Cuba None
England Elizabeth Denham, Information Commissioner
Information Commissioner’s Office (ICO)
Ico.org.uk
Italy Italian Data Protection Authority is based in Rome.
Piazza Venezia 11 - 00187 Roma (Italy)
Phone: +39 06.696771
Email: protocollo@gdpd.it
Nigeria NITDA HQ
No. 28, Port Harcourt Crescent, Off Gimbiya Street, P.M.B 564, Area 11, Garki, Abuja, Nigeria.
Email: info@nitda.gov.ng
Phone:+2348168401851, +2340752420189, +234 92 920 263   Several Data Protection Compliance Organisations (DPCOs) licensed by the National Information Technology Development Agency (NITDA) – list can be found at https://ndpr.nitda.gov.ng/Content/Doc/V.7%20DPCO%20LIST%20.pdf
Scotland Ken McDonald
The Information Commissioner’s Office – Scotland
Queen Elizabeth House
Sibbald Walk
Edinburgh
EH8 8FT
Telephone: 0303 123 1115
Email: Scotland@ico.org.uk
South Africa Mr. Mosalanyane Mosala
The Information Regulator
General enquiries: enquiries@inforegulator.org.za
USA None
  • Anguilla
  • Antigua & Barbuda
  • The Bahamas
  • Barbados
  • Belize
  • Bermuda
  • British Virgin Islands
  • Cayman Islands
  • Dominica
  • Grenada
  • Jamaica
  • Montserrat
  • St Kitts and Nevis
  • St Lucia
  • St Vincent and the Grenadines
  • Trinidad and Tobago
  • Turks and Caicos