Data Protection Act, No. 1 of 2023, application to processing of personal data
Data Protection Act, No. 1 of 2023, ss. 4, 7 (Application of Act; General Principle)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
Commencement not set.
A personal data rule binding public and private bodies.
As of 5 September 2026.
What it requires
- This Act is not yet in force; commencement awaits a ministerial Order in the Gazette.
- Once in force, establish a lawful basis, ordinarily the data subject's consent, before collecting or processing personal data from Grenada, including through crawling or scraping.
If you get it wrong
Criminal exposureYes
Private right of actionYes
Criminal exposure note
Intentionally disclosing personal information in contravention of the Act, or collecting, storing or disposing of it in a manner that contravenes the Act, is an offence (s. 39), punishable under the default penalty of s. 42(1): a fine not exceeding one hundred thousand dollars or imprisonment not exceeding five years on conviction on indictment, or a lesser fine or term on summary conviction.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
The Data Protection Act, No. 1 of 2023 applies to a person who processes, controls or authorises the processing of any personal data in respect of commercial transactions in Grenada, including a person established outside Grenada who uses equipment or network services in Grenada for that processing.
The definition of personal data and the general processing grounds carry no publicly-available carve-out for personal data generally; the only publicly-made ground is scoped to sensitive personal data specifically, where section 21(1)(c) permits processing sensitive personal data that has been made public as a result of steps taken by the data subject.
So a scraper collecting ordinary personal data from Grenada, including for training a model, would need a lawful basis, ordinarily the data subject's consent, once the Act is brought into force. Section 1(2) delays commencement to a day the Minister appoints by Order in the Gazette, and no such Order has been located, so the Act does not currently bind anyone.
When LexLint raises it
crawls_webtrains_models