Data Protection Act, transfer of personal data

Act 11 of 2011, s. 45 (transfer of personal data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Commencement not set.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

Section 45's restriction on transferring personal data outside Saint Lucia is enacted and not in force, so a data controller currently has no statutory duty under this Act to secure Commissioner authorization or comparable safeguards before an international transfer.
Once section 45 is in force, transfer personal data outside Saint Lucia only where the receiving country or territory has comparable safeguards and the Commissioner has authorized the transfer, or a listed exception applies, such as the data subject's consent, contractual necessity, national or public security, or Commissioner-approved terms.

What it reaches

Obligation class

Transfer

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Section 45 would bar a data controller from transferring personal data to a country or territory outside Saint Lucia unless the receiving country or territory has comparable safeguards to those in Saint Lucia and the Commissioner has authorized the transfer, subject to exceptions where the data subject consents, the transfer is necessary for a contract with or requested by the data subject, it is necessary to safeguard national security, it concerns public security, or the Commissioner approves the transfer's terms as adequately safeguarding the data subject's rights.

Section 45 sits at the end of Part 3 alongside the data-controller obligations, and it is enacted and not in force, so no transfer condition binds a data controller today. Schedule 2's Eighth Principle, the Transfer of Data Principle, restates the same rule by reference to section 45. The 2015 Act left both untouched.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
distributes_software_product
ships_mobile_app

Read the law

Data Protection Act No. 11 of 2011, Saint Lucia, full text of the Act as enacted

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app