Office of the Information Commissioner

What Office of the Information Commissioner does

The Office of the Information Commissioner (OIC) is a statutory regulatory body of the Government of Jamaica established under the Data Protection Act, 2020. It is the sole authority responsible for monitoring compliance with the Act, advising the relevant Minister, educating the public, registering data controllers, investigating complaints, and enforcing data protection standards across Jamaica. Its statutory powers include issuing notices, pursuing criminal prosecution, and imposing civil remedies against non-compliant data controllers. The organization also operates a structured complaint resolution process and maintains the public Register of Data Controllers.

Core operations are delivered digitally through the My OIC Portal, which supports data controller registration, annual renewal, account management, data breach reporting (mandatory within 72 hours), and data subject complaint submission. Supporting services include a public-facing Register of Data Controllers, fee payment processing via National Commercial Bank, sensitization sessions, and a recently launched Data Protection Working Group (DPWG) for regulatory framework development. The OIC is headquartered in the Masonic Building, Barbados Avenue, Kingston 5, and currently operates with a small team of approximately 7 staff — well short of the envisioned full build-out of ~60 — under the leadership of Information Commissioner Celia Barclay and Deputy Information Commissioner Ronald Frue.

Revenue is generated through prescribed annual registration fees that vary by entity type: companies and public authorities pay JMD 25,000 (first-time) and JMD 15,000 (renewal); partnerships JMD 15,000 / JMD 10,000; and sole traders or individuals JMD 7,500 / JMD 5,000. All fees are remitted to the OIC via deposit or transfer to its NCB account. By late 2024, the Register contained over 500 approved data controllers spanning financial institutions, government agencies, telecoms, healthcare providers, and educational institutions, indicating a broad rather than concentrated regulated base.

Name

Office of the Information Commissioner

Legal name

Office of the Information Commissioner, Jamaica

Website

https://oic.gov.jm

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

1–10 employees

Short description

The Office of the Information Commissioner (OIC) is Jamaica's statutory data protection regulatory authority under the Data Protection Act 2020. It registers and oversees data controllers, enforces compliance, investigates complaints, and manages data breach reporting through the My OIC Portal.

Ownership category

akta.pro rank

Product category

Data Protection Regulation

NAICS

Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615), Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (926150)

akta.pro primary industry

Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)

Keywords

• Data protection regulation
• Privacy compliance services
• Regulatory oversight
• Data controller registration
• Data privacy enforcement

Headquarters

HQ city

Kingston 5

HQ country

Jamaica

HQ region

Latin America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Data Controller Registration Fees: The OIC collects prescribed registration fees from data controllers who must register annually. Fees vary by entity type: companies and public authorities pay higher fees than partnerships, sole traders, or individuals. First-time registration fees are higher than renewal fees.

Pricing tiers

Go-to-market motion1 record

Distribution channels5 records

Marketing channels6 records

Core offering

The Office of the Information Commissioner (OIC) is Jamaica's statutory data protection regulatory authority established under the Data Protection Act, 2020. It registers data controllers, enforces the eight data protection standards, investigates complaints, reports data breaches, and educates organizations and the public on privacy compliance. Services are delivered through the My OIC Portal and supporting public-facing website resources.

Product overview

The Office of the Information Commissioner (OIC) is Jamaica's data protection regulatory body operating under the Data Protection Act, 2020. The OIC offers a suite of digital services centered around the My OIC Portal, which enables data controller registration, account management, and compliance tracking. Key services include the Data Breach Reporting System for mandatory breach notifications, a Data Subject Complaint handling service, and the public Register of Data Controllers. The OIC also provides educational services through its presentation request system and manages the Data Protection Working Group for regulatory development. All services are delivered through web-based forms and the online portal, with associated fee payment services for registration.

Differentiator

Problem solved

Functional benefit

Products and services

• Data Controller Registration Mandatory annual registration service for businesses, public authorities, partnerships, sole traders, and individuals that process personal data in Jamaica under the Data Protection Act, 2020. Registrants pay prescribed fees and receive certificates of registration.
• Data Breach Reporting System Online form-based service enabling registered data controllers to notify the Information Commissioner of personal data breaches within 72 hours of becoming aware, as required under the Data Protection Act.
• Data Subject Complaint Handling Service enabling individuals (data subjects) to lodge complaints against data controllers for alleged non-compliance with the Data Protection Act, which the OIC investigates and resolves through its Complaints Resolution and Compliance Branch.
• Register of Data Controllers Publicly accessible registry maintained by the Information Commissioner listing all registered and approved data controllers in Jamaica, available for public verification on the OIC website.
• Request a Presentation Service allowing organizations to request free educational presentations and sensitization sessions from the OIC on the Data Protection Act and compliance requirements.
• Fee Payment Services Service facilitating payment of data controller registration and renewal fees via direct deposit or funds transfer to OIC's account at National Commercial Bank, as prescribed in the Data Protection (Data Controller Registration) Regulations, 2024.

Quantifiable outcome

• Two-year transitional period provided for data controllers to achieve compliance
• +1 more outcomes

Named customers7 records

Segments5 records

Ideal customer profiles6 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• e-Learning Jamaica Company LimitedcoreStrategic or Co-development Partner · 1 January 2025e-Learning Jamaica Company Limited partnered with the Ministry of Education and Youth to host a hybrid Cybersecurity and Data Protection Forum for educators and administrators. The OIC participated in this forum to educate educational institutions about data protection obligations under the Data Protection Act.

Scale indicators2 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Data Protection Commission (Ireland): Ireland's statutory data protection regulator enforcing GDPR-equivalent national law, with registration, complaint handling, and enforcement powers. Highly comparable to the OIC in regulatory function, though operating in a larger EU-aligned jurisdiction.
• Office of the Australian Information Commissioner (OAIC): Australia's national privacy regulator handling complaints, conducting privacy assessments, and enforcing the Privacy Act. Comparable in function to the OIC with parallel responsibilities for registration oversight, complaint handling, and public education.
• Office of the Privacy Commissioner of Canada: Canada's federal privacy regulator with statutory authority to investigate complaints, conduct audits, and enforce compliance under PIPEDA. Directly comparable as a national-level data protection authority with a similar mandate scope.
• Office of the Privacy Commissioner (New Zealand): New Zealand's independent privacy regulator with statutory enforcement powers under the Privacy Act. Highly comparable as a small-jurisdiction Commonwealth-style data protection authority serving a single national market.
• Hong Kong Privacy Commissioner for Personal Data (PCPD): Hong Kong's statutory privacy regulator with registration, complaint investigation, and enforcement powers. Comparable mandate and structure as a Commonwealth-jurisdiction data protection authority.
• Barbados Data Protection Office: Barbados's national data protection regulator, a direct Caribbean peer also operating under recently enacted data protection legislation. Strongly comparable geographic and regulatory context for benchmarking the OIC.
• Office of the Information and Privacy Commissioner (Ontario, Canada): Ontario's provincial privacy regulator with complaint handling, enforcement, and public education functions under Canadian health and privacy law. Comparable in role to the OIC as a sub-national (or jurisdiction-specific) data protection authority.
• Personal Data Protection Commission (Singapore PDPC): Singapore's statutory data protection authority with registration, enforcement, and advisory functions under the Personal Data Protection Act. Comparable in mandate structure and provides a model for small-state data protection regulators.

Broad incumbents

• Commission Nationale de l'Informatique et des Libertés (CNIL, France): France's national data protection regulator with extensive enforcement powers under GDPR/Loi Informatique et Libertés. Comparable in regulatory mandate, though far larger scale and EU-aligned scope.
• Information Commissioner's Office (UK ICO): The UK's independent data protection regulator with statutory enforcement powers, fee-based registration/data protection fee, and public register. Directly comparable in mandate and structure to Jamaica's OIC, but operates at a much larger scale across the UK.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/office-of-the-informationcommissioner

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Office of the Information Commissioner