Marshall IslandsPersonal Data Protection Act 2025, competent authority, remedies, and complaints
Personal Data Protection Act 2025, ss. 406-408, 410-414, 416-417 (6 MIRC Ch. 4, P.L. 2025-43)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force 11 months, effective 7 October 2025.
An enforcement supervision rule binding government bodies.
As of 19 September 2026.
What it requires
- Maintain confidentiality of personal data obtained while performing duties for the competent authority, if engaged by it as a director, employee, or consultant.
- Provide the competent authority, the Economic Policy, Planning and Statistics Office, with information it requests as needed for it to carry out its duties under this Chapter.
- Compile and record, for each calendar year, the policies, decisions and actions taken to implement this Chapter and the complaints received about it, including how many were received, which principles they alleged were contravened, and how they were resolved.
- Report that information to the competent authority by July 1 of each year, in anonymized form for its statistical and Nitijela reporting.
- Establish a process for natural persons residing in the Republic to submit complaints about alleged violations of the personal data protection principles, consistent with any guidance the competent authority adopts, and retain records of the complaints and any action taken.
- Expect a natural person residing in the Republic who is injured by improper administration of this Chapter to be able to sue for an injunction, mandamus, a corrective order, or a public statement of remedy, though not for compensatory damages against the ministry or agency itself.
- Expect a natural person to be able to separately sue an employee personally, including for compensatory damages against the employee, for willful or grossly negligent conduct that causes such an injury.
- Comply with any regulation the competent authority makes, with Cabinet approval, to implement this Chapter.
If you get it wrong
Private right of actionYes
What it reaches
Obligation class
Governance, Reporting
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Section 406 designates the Economic Policy, Planning and Statistics Office (EPSSO) as the competent authority responsible for administering this Chapter, and section 407 gives it power to develop guidance and capacity-building initiatives, coordinate data sharing among ministries and agencies, require information from them as needed to comply with this Chapter, and make rules or regulations for its implementation.
Section 408 requires any director, employee, consultant, or other person engaged by the competent authority under this Chapter to maintain confidentiality of personal data obtained in the performance of their duties.
Section 410 lets a natural person residing in the Republic who suffers an injury from a core Government ministry's or agency's alleged improper administration of the Chapter bring suit against that ministry or agency, and separately lets that person sue an employee of the public service personally, in the employee's own capacity, for willful or grossly negligent conduct causing the injury, including for compensatory damages against the employee.
Section 411 lists the remedies a court may impose on the ministry or agency itself, an injunction, mandamus, a corrective order, or a public statement of remedy, but bars a court from awarding compensatory relief against the ministry or agency itself. Section 412 requires the competent authority to report yearly to the Minister for presentation to the Nitijela on this Chapter's implementation.
Section 413 requires core Government ministries and agencies to compile and record each calendar year the policies and actions taken to implement the Chapter and the complaints received, and to report that information to the competent authority by July 1 of each year in anonymized form.
Section 414 requires each ministry and agency to establish a process for a natural person residing in the Republic to submit a complaint about an alleged violation, consistent with the competent authority's guidance. Section 417 lets the competent authority, with Cabinet approval, make regulations for the Chapter's effective performance. The Chapter states no penalty or offence provision of its own.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbothigh_risk_decisions
Read the law
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2026. Publisher's page: https://www.rmiparliament.org/cms/images/LEGISLATION/PRINCIPAL/2025/2025-0043/2025-0043_1.pdfEvery line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.