Legal framework governing cybersecurity and data protection in Antigua and Barbuda
Antigua and Barbuda has established a comprehensive legal framework to address cybersecurity challenges, protect personal data, and combat electronic crimes.
The Data Protection Act 2013 ensures the privacy and protection of personal data, establishing guidelines on how personal information should be collected, used, stored, and disclosed.
Non-compliance can result in fines up to $100,000 XCD and/or imprisonment for up to 2 years.
The Electronic Crimes Act 2013 provides the framework for addressing cybercrimes, defining various cyber offenses and establishing procedures for investigation and prosecution.
Offenses carry penalties ranging from fines of $50,000 XCD to imprisonment for up to 10 years, depending on the severity.
The Electronic Crimes (Amendment) Act 2018 strengthens the legal framework for addressing cybercrimes, expanding the scope of offenses and introducing updated penalties.
Graduated penalties with increased maximum sentences of up to 15 years for serious cybercrimes.
Several other laws complement the primary cybersecurity legislation, providing a comprehensive legal framework for digital security and privacy protection.
Establishes the legal mandate and operational framework for the Government of Antigua and Barbuda's Cyber Incident Response Team (govCIRT), defining obligations for reporting, responding to, and recovering from significant cyber incidents.
Failure to report a notifiable incident can result in fines up to $200,000 XCD. Obstruction of a govCIRT investigation carries imprisonment of up to 5 years.
If you have been a victim of cybercrime or need to report a security incident, contact our specialised unit immediately.