GHS Data Security Limited
Data Protection Gap Analysis
We audit your practices against all eight data protection standards.
You get: Gap report, risk register and compliance roadmap.
Kingston · Data Protection Act ready
data protection.
Hardened networks. Airtight compliance. Trained people. GHS Data Security Limited helps Caribbean organisations meet the Data Protection Act and stay protected, month after month.
8/8Standards covered
72 hrsBreach reporting window
4%Maximum fine on turnover
30 yrsFounder experience
The compliance reality
Data protection is no longer optional
From Kingston to Bridgetown, regulators are moving from awareness to enforcement.
The risk
A company can be fined up to 4% of its annual gross worldwide turnover. One breach can undo a reputation built over years.
The law
Every data controller, sole traders included, must register with the Information Commissioner and keep a record of how it handles personal data.
The clock
A breach must be reported to the Commissioner within 72 hours. Being "in the process" is no longer a defence.
Every year
Controllers send the Commissioner a data protection impact assessment within the first 90 days of each calendar year.
Your digital passport
International partners now ask for proof of compliance before they do business with you.
Affordable protection
Our virtual data protection officer service is priced for Caribbean small and medium businesses.
Service line
The toolkit
Commissioner Registration
We prepare your record of processing, complete the forms and submit them for you.
You get: Completed registration and confirmation letter.
Virtual Data Protection Officer
Monitoring, breach handling, impact assessment reviews and regulator communication.
You get: Dedicated cover, monthly reports and representation.
Security Infrastructure
Cybersecurity planning, network hardening, architecture review and cloud security.
You get: Security strategy and incident response framework.
Vulnerability Assessment
We find the weak points in your systems before attackers do.
You get: Findings report with a prioritised fix list.
Incident Response Planning
Your breach response plan and 72 hour reporting drill, ready before you need them.
You get: Response plan, notification templates and team training.
Self check
How exposed are you?
Six honest questions. Your answers stay on your device.
Is your organisation registered with the Information Commissioner?
Do you have a written data protection policy that staff have read?
Could you report a data breach to the Commissioner within 72 hours?
Have your staff had data protection training in the last twelve months?
Have you sent in this year's data protection impact assessment?
Has anyone tested your network for weak points in the last year?
0 of 6 controls in place
Not started
Answer honestly. Nothing you choose here leaves your device.
Close my gaps
Exposure calculator
What could one breach cost?
For a company, the maximum fine under the Act is 4% of annual gross worldwide turnover. Move the slider to your turnover.
Annual turnover$150,000,000 JMD
Maximum fine at 4%$6,000,000 JMD
For illustration only. Actual penalties depend on the offence and are set by the courts and the Commissioner.
Our method
The GHS Cyber Resilience Framework
STAGE 01
Discover
List your systems and data, and find where the risks are.
STAGE 02
Assess
Test for weak points and map the threats you actually face.
STAGE 03
Design
Build a security plan that fits your business and budget.
STAGE 04
Deploy
Put it in place in stages, with as little disruption as possible.
STAGE 05
Defend
Monitor, improve and stay ready, month after month.
COMING SOON
GHS Cyber Academy
Practical courses in data protection, network security and IT, taught by people who do the work every day.
FOUNDATION
Data Protection Essentials
PROFESSIONAL
Network Security
CORPORATE
Team Training
Who we serve
Built for key sectors
Financial services
Banks and credit unions meeting strict regulatory and customer data rules.
Healthcare
Hospitals and practices protecting sensitive patient records.
Government
Ministries and agencies keeping citizen data secure.
Small business
Affordable, practical protection that fits a smaller budget.
Insights
All articles →From the blog
Get started
Let's test yours.
Free, confidential Gap Analysis · Kingston, Jamaica · Serving the Caribbean