CCDP Logo

Compliance Matters

Critical regulatory guides, legal summaries, and educational materials to understand the mechanics of local compliance in Jamaica.

Financial Safeguards

Proceeds of Crime Act (POCA) & AML

The Proceeds of Crime Act (POCA) serves as the primary legislative pillar combating money laundering, terrorist financing, and proliferation activities in Jamaica. Under POCA guidelines, organizations are legally mandated to implement rigorous procedures to prevent their services from being used for illicit transactions.

Key Operational Mandates under POCA:

  • Customer Due Diligence (CDD): Establishing the true identity of clients, beneficial owners, and transaction origins.
  • Suspicious Transaction Reporting: Identifying and reporting unusual activities directly to the Financial Investigations Division (FID).
  • Compliance Officers Appointment: Appointing designated staff to oversee audit reviews and manage rule training.

FATF Deficiencies: The Financial Action Task Force (FATF) oversees country compliance. Jamaica has been addressing deficiencies to protect its standing in the global financial system, making internal compliance audits essential for every registered enterprise.

POCA Compliance Framework
Board Fiduciary Duties

Modern Corporate Governance

Corporate governance is no longer just a set of recommendations; it is a critical regulatory requirement. Boards of Directors carry ultimate responsibility for ensuring their organization puts systems in place to satisfy legal directives.

Directors must transition from passive oversight to active risk governance. This requires gaining specific competencies in data handling, transaction auditing, and compliance policy authorization.

Governance Retraining Objectives:

Retraining directors focuses on creating bulletproof internal controls, establishing clear lines of reporting, and authorizing adequate budgeting to support the work of Compliance and Data Protection Officers. Failure to demonstrate active due diligence can lead to personal board liability and reputational damage.

Board Governance Training Session
Information Privacy

Jamaica Data Protection Act (DPA)

The Jamaica Data Protection Act 2020 governs how personal information of Jamaican residents is collected, stored, and processed. It places strict obligations on "Data Controllers" to implement security guidelines, respect client rights, and protect data folders from breaches.

Key Pillars of DPA Compliance:

  • Data Protection Officer (DPO): Organizations must register a certified DPO with the Information Commissioner.
  • Data Protection Impact Assessments (DPIA): Mandatory reviews to identify and mitigate risk when introducing new database systems.
  • Data Subject Rights: Clients have legal rights to request access, rectification, or complete deletion of their personal files.
View DPA Course Modules
DPA Compliance and Security

Ensure Your Organization Meets All Statutory Rules

Our principals assist enterprises with system evaluations, policy drafts, and specialized training to satisfy NCRA, FID, and Data Protection guidelines.

Book Auditing Consultation Now