The Data Protection Act in Jamaica: Implications for Research Practice and the Legal Status of Demographic Data

Abstract

The enactment of the Data Protection Act (Jamaica, 2020) represents a transformative shift in the governance of personal information in Jamaica, aligning national legal frameworks with global data protection standards such as the GDPR. This study examines the structure, principles, and operational implications of the Act, with a particular focus on its impact on academic and policy-oriented research. A central gap in the literature is identified in the limited scholarly interrogation of how routine demographic variables, such as age, gender, marital status, religious affiliation, and number of children, interact with statutory definitions of personal and sensitive personal data within the Jamaican legal context. Using doctrinal legal analysis and a synthesis of scholarly privacy literature, the study evaluates whether such variables constitute breaches under the Act and under what conditions. Findings indicate that while most demographic variables are classified as personal data, only specific categories, particularly religious affiliation, fall under sensitive personal data requiring heightened protection. The legality of processing these variables depends not on their mere collection but on adherence to core principles such as lawful processing, data minimisation, and informed consent. For researchers, the Act introduces significant ethical and procedural obligations, including anonymisation, purpose limitation, and institutional accountability. The study contributes to Caribbean data governance scholarship by clarifying ambiguities surrounding demographic data usage and proposing a framework for compliant research practice. It concludes that responsible data handling, rather than categorical exclusion of variables, is essential for lawful and ethical research under the Act.