Law: Data Protection Act, 2011 ('the Act'). Please note, however, that only Part One, Sections 1 to 6, and Part Two, Sections 7 to 18, 22, 23, 25(1), 26 and 28, and Part Three, Section 42(a) and (b) of the Act have been partially proclaimed by Legal Notice 2 of 2012 and by Legal Notice 220 of 2021.

Regulator: The Act provides for the Office of the Information Commissioner ('the Commissioner') (not yet established).

Summary: In addition to Article 4(c) of the Constitution of the Republic of Trinidad and Tobago, which protects the right to private and family life, the Act applies to both private and public bodies and seeks to ensure the protection of an individual's right to privacy. In particular, the Act sets out the right to maintain sensitive personal information as private, confidential, and personal. Although the Act provides for sanctions for potential violations of its provisions, since the Commissioner has not been appointed, the Act is not yet enforceable. Since only limited provisions from the Act have come into effect, the data protection regime in Trinidad and Tobago can be considered limited.