Privacy Policy

Data Privacy Notice (External)

Objective 

The Bureau of Standards Jamaica Data Privacy notice outlines how personal data is collected, processed, stored and protected, as well as the rights of data subjects. 

Purpose 

The Bureau of Standards Jamaica (BSJ) are committed to protecting your privacy and handling personal data in line with the Jamaica’s Data Protection Act, 2020. This privacy notice explains what personal data we collect, how and why we use it, how long we keep it, who we share it with, and the rights you can exercise when you interact with the BSJ online or in person.

1. Information We Collect

We may collect:

• Personal data: identifiers (e.g., Taxpayer Registration Number (TRN), passport or driving licence number) and contact details (email address, telephone number, postal address).
• Technical and usage data: IP address, browser type, time‑zone setting, device information, pages visited, and links clicked on BSJ websites.
• Cookies and similar technologies: see our cookie policy for details and choices.

Note: Where required for specific services, the BSJ may process sensitive personal data (e.g., biometric identifiers, health information) in accordance with the Jamaica Data Protection Act (JDPA) conditions.

2. How we use your personal data and legal bases

We process personal data to:

• Provide services and respond to enquiries (contract, legitimate interests).
• Meet legal and regulatory obligations (legal obligation).
• Protect our websites and services from fraud and abuse (legitimate interests).
• Send updates about BSJ services, events and policies (consent; you may withdraw at any time).
• We will retain personal data only as long as necessary for these purposes and applicable legal requirements, then delete or anonymise it.

3. How We Use Your Information 

The data we collect is used for: 

• Improving website functionality and content. 
• Responding to inquiries or service requests. 
• Providing updates on the BSJ services, events and policies.

4. Legal Basis for Processing

We process personal data and sensitive personal data in accordance with the JDPA. The legal bases for processing include: 

• Consent: Where you have provided explicit consent for us to use your data. 
• Contractual Obligations: Processing necessary for the performance of a contract. 
• Legal Obligations: Compliance with applicable laws and regulations. 
• Legitimate Interests: For business operations and service improvements. 

5. Data Sharing

We do not sell or rent your personal information. Your personal information will be shared as follows: 

• With service providers who assist in website maintenance and security. 
• If required by law, to comply with legal obligations. 
• With third-party processors who are bound by data protection agreements.
• With relevant government entities, such as the Ministry of Industry, Investment and Commerce (MIIC), where legally required or permitted to support regulatory or compliance obligations.

6. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected and comply with legal obligations. 

7. Your Rights

Under the JDPA 2020, you have the following rights: 

• Right of Access: You may request a copy of your personal data or sensitive personal data. 
• Right to Correction: Request corrections to any inaccurate data. 
• Right to Erasure: Request the deletion of your personal data, subject to certain conditions. 
• Right to Restrict Processing: Request to limit the processing of your personal data.

8. Data Security

We apply appropriate technical and organisational measures and applied layered controls for  role‑based access, encryption (in transit and at rest where appropriate), network security, monitoring and incident response and review these controls periodically. Steps will be taken to continuously assess and improve these controls.

9. Cookies 

For more details on how we use cookies and how you can manage them, please see our [Cookie Policy.docx]. 

10. Contact Information

If you have any questions about this Privacy Notice or wish to exercise your data protection rights, please contact our Data Protection Officer at: 

Email: [dpo@bsj.org.jm] 

Address: 6 Winchester Road, Kingston 10, Jamaica

Office of the Information Commissioner (OIC): https://oic.gov.jm

Approved by:

Velton Gooden Ph.D

Executive Director