Straight answers, no jargon.

Almost certainly yes. If you decide why and how personal information is collected and used, you are a data controller, whether you are a sole trader with a customer list on WhatsApp or a company with a customer database. The Act does not have a minimum size.

Data controllers must register with the Office of the Information Commissioner and describe the personal data they handle and why. Registration is renewed, and processing personal data without being registered is an offence in itself, even where nothing has gone wrong.

Seventy-two hours from the moment you become aware of it, not from the moment you finish investigating. You report to the Commissioner and tell the people affected. Reporting what you know on time, then following up, is better than a late report with every answer in it.

The Commissioner can serve enforcement notices and fixed penalty notices, and people who suffer harm can claim compensation. For a company, a criminal fine on conviction can reach four per cent of annual gross worldwide turnover. For most businesses, though, the heavier cost is lost trust.

Public authorities need one. So do organisations that handle sensitive personal data or process data on a large scale, and any organisation the Commissioner directs. Many smaller organisations use a part-time or virtual officer instead of hiring a full-time person.

We look at how your organisation handles personal data today, measure it against the eight standards in the Act, and give you a written report of what is in place and what is missing. It costs nothing, there is no obligation, and the report is yours to keep even if you never hire us.

It depends on your size and how much is already in place. A small business with a handful of systems is usually a few weeks of part-time work. A larger organisation with several branches and older systems takes longer, and we stage it so your day-to-day work keeps running.

Yes. We are based in Kingston and work with organisations across Jamaica and the wider Caribbean. Much of the work is done remotely, with site visits where they are genuinely useful.

You get a written quote before any work starts, with General Consumption Tax shown separately, and nothing is added later without your agreement in writing. The Gap Analysis itself is free.

Yes. We run security awareness and data protection sessions built around your own organisation, and the GHS Cyber Academy will offer open courses for individuals. Tell us the size of the team and we will shape a session around it.