The framework
The Marshall Islands has no single comprehensive statute and protects personal data through sectoral rules, principally the Personal Data Protection Act 2025 (P.L. 2025-43), public sector only.
Absent a local rule, the practical constraints come from platform policies and foreign laws with extraterritorial reach.
Key instruments
Personal Data Protection Act 2025 (P.L. 2025-43), public sector only
The Marshall Islands passed a Personal Data Protection Act in 2025, but it binds government ministries and agencies only and takes effect twelve months after certification. Private-sector data remains unregulated.
Marketing and advertising
The 2025 Act covers government ministries and agencies only; private businesses have no general consent rule. With no operative local consent rule, the practical guardrails are platform policy and any foreign law that can reach the campaign.
Cross-border transfers
No general rule restricts private-sector data leaving the country.
Enforcement and penalties
No penalties apply to private businesses under a general privacy law.