This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Data Protection
Your Data – You Own it, We Respect it
We are putting new measures in place to better protect your personal information and privacy. You will now have more control over how your information is used by us and how you are contacted.
What is Data Protection?
Data protection is the fair and proper use of information about people. It is part of the fundamental right to privacy – but on a more practical level, it’s really about building trust between people and organisations. It’s about treating people fairly and openly, recognising their right to have control over their own identity and their interactions with others, and striking a balance with the wider interests of society.
How Do We Protect Your Data?
JN Group has always handled your personal information confidentially and securely, and our renewed commitment is in keeping with the requirements of the Jamaica Data Protection Act (JDPA), which became effective on June 12, 2020.
To learn more about how your personal information is used, please read our updated Privacy Notice.
If you require any further information, please contact us at helpdesk@jngroup.com or click here to see our contact details.
We, at JN Group, are committed to preserving your privacy rights and protecting your personal information.
Jamaica Data Protection Act (JDPA)
The Jamaica Data Protection Act (JDPA) gives legal protection to how your personal data is used by organisations,
8 Standards for Processing Personal Data under
the Jamaica Data Protection Act (JDPA)
Personal data must be processed fairly and lawfully
Personal data must only be obtained for specific purposes and not processed in any manner incompatible with those purposes
Personal data must be adequate, relevant, and limited to the purpose for which it is processed.
Personal data must be accurate and, where necessary, kept up to date
Personal data must not be kept for longer than is necessary and must be disposed of in compliance with data protection regulations.
Personal data must be processed in accordance with the rights of data subjects
Personal data must be protected using appropriate technical and organisational measures
Personal data must not be transferred outside of Jamaica without ensuring adequate levels of protection
5 Rights of the Data Subject
RIGHT OF ACCESS TO PERSONAL DATA
RIGHTS IN RELATION TO AUTOMATED DECISION-TAKING
RIGHT TO PREVENT PROCESSING
RIGHT TO CONSENT TO PROCESSING
RIGHT TO RECTIFICATION
What is considered
processing of personal data?
Any use of personal data processing
Collect
Erase
Analyse
Processing
Transmit
Access
Store
What is Personal Data?
Information that is about YOU ...
Any information relating to a person (a ‘data subject’) who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
Name
Address
Location
Online Identifier
Health Information
Income
Cultural Profile
And More ...
Sensitive personal data
Sensitive personal data is personal data which is considered more sensitive, and so needs more protection. For example, the following information about an individual:
Ancestry
Race or ethnicity
Political beliefs
Religious or philosophical beliefs
Trade union membership
Genetic or biometric data
Physical or mental health
Sex life or sexual orientation
Allegations of criminal activity or criminal proceedings
Jamaica Data Protection Act
FAQs
Personal data is any information relating to a person (a ‘data subject’) who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
Processing of personal data means using personal data in any way, including, collecting, storing, analysing, accessing, sharing, transmitting and erasing.
Consent is defined as any freely given, specific, informed and unambiguous indication of a person’s wishes by a statement or by a clear affirmative action, signifying agreement to the processing of personal data
Personal information (data) means all information that can be used to directly or indirectly identify a person. Examples would be name, date of birth, address, tax reference number, email address and also online identifiers such as IP address.
The Data Protection Officer (DPO) is responsible for, among other things, monitoring internal compliance with the Data Protection Act, informing and advising the organisation on data protection obligations, providing advice regarding privacy assessments and acting as a contact point for data subjects and the supervisory authority.
The Jamaica National Group has appointed a DPO for the Group, who is based in Jamaica.
The JN Group treats our customers and members’ personal information as private and confidential and only shares this information if it is legally permitted to do so. We may disclose personal information with affiliated or non-affiliated third parties, who provide services for us that are necessary to meet our contractual obligations to you, or as necessary for the purposes of legitimate interests.
We will also disclose information, where necessary to comply with any legal obligation to which we are subject, e.g. disclosure to a regulatory body.
Companies are expected to observe the eight standards for processing personal data under the JDPA:
- Process personal data fairly and lawfully.
- Process personal data in ways that are compatible with the purposes for which it was collected.
- Ensure that personal data is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
- Ensure that personal data is accurate and up-to-date.
- Ensure that personal data is not kept for longer than is necessary and is disposed of as required.
- Process personal data in accordance with data subjects’ rights.
- Ensure that personal data is protected by appropriate technical/organisational measures and notify the Information Commissioner of any security breach which may affect personal data.
- Ensure that personal data is not transferred outside Jamaica without adequate levels of data protection.
The JDPA gives you five rights over your personal data, subject to certain conditions:
- Right of access to personal data
- Right to consent to processing
- Right to prevent processing
- Rights in relation to Automated Decision making
- Right to rectification
You may contact our Data Protection Officer by email at jngroupdpo@jngroup.com.
How long does the JN Group keep my information?
We will keep your information for as long as you have an account with us, and thereafter, for the amount of time required to satisfy any legal obligation to retain records