REGISTRATION for data controllers under Jamaica’s Data Protection Act has been temporarily paused as the Office of the Information Commissioner (OIC) upgrades its online system ahead of the 2025–2026 compliance cycle.

Although the new registration year officially began on December 1, the OIC said registrations were suspended until December 15 to allow for technical enhancements to its online portal. The regulator acknowledged that the delay may have caused inconvenience for some organisations but said the pause was necessary to ensure the system operates reliably and securely once fully reopened.

One of the main changes being introduced is e-commerce functionality, which will allow data controllers to pay registration fees directly through the portal using debit or credit cards. According to the OIC, the new payment option will provide instant confirmation of fees paid, significantly improving the efficiency with which registration applications are processed.

Registration is a core requirement under the Data Protection Act and forms the backbone of the OIC’s oversight framework. Entities that determine how and why personal data is collected or processed — including businesses, schools, health-care providers, financial institutions, and some non-profits — are required to register as data controllers. The register also supports transparency by allowing the public to see which organisations are legally authorised to process personal data.

The OIC stated that the suspension was implemented to rigorously test the upgraded platform before its full relaunch, reinforcing confidence among regulated entities and data subjects alike.

The update comes as Jamaica’s data protection regime continues to move from awareness-building to firmer compliance expectations. The information commissioner has repeatedly reminded organisations that failure to register as a data controller constitutes an offence under the Act, while data subjects retain the right to pursue civil claims where their personal data is mishandled or inadequately protected.

The OIC said it remains committed to fulfilling its mandate in a way that supports compliance and strengthens public trust in how personal data is handled across the economy. It added that further updates will be issued through its official communication channels, and a public notice will be published at least two weeks in advance of the portal’s reopening.