Status
In force
Consent model
Opt-in
Primary law
Data Protection Act 2019
Year
2019
Authority
Data Protection Commissioner
Marketing consent
GDPR-modeled consent and bases.
Transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Penalties
The Act provides for fines and imprisonment.
The framework
Barbados' framework rests on the Data Protection Act 2019, with the Data Protection Commissioner as the supervisory authority.
That puts Barbados in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Data Protection Act 2019
2019 · In force
A close GDPR adaptation in force since 2021; registration and DPO duties apply to larger processors.
Marketing and advertising
GDPR-modeled consent and bases. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Enforcement and penalties
The Act provides for fines and imprisonment. Read the ceiling together with the authority's track record, which prices the risk.
Cite this page: "Barbados Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/barbados.html. Accessed [date].