Jamaica Moves Toward Cybersecurity Act After Millions of Attempted Cyberattacks

Proposed legislation would establish security obligations and penalties aimed at protecting systems before breaches occur as Jamaica modernizes its national cyber-defence framework.

KINGSTON, Jamaica — Jamaica is moving toward a dedicated Cybersecurity Act that would impose security obligations on entities and individuals responsible for systems that collect, store and process data, as the Government seeks to strengthen the country’s defences against millions of attempted cyberattacks.

Director of the Cyber Incident Response Team Division, Lieutenant Colonel (Retired) Godphey Sterling, said research for the proposed legislation has been completed and the next step is Cabinet approval to issue drafting instructions.

The proposal comes as the Government reports 5.4 million attempted cyberattacks during the first three months of 2026. Minister without Portfolio in the Office of the Prime Minister with responsibility for Science, Technology and Special Projects, Dr. Andrew Wheatley, said Jamaica recorded more than 12 million attempts in 2022, about 43 million in 2023 and more than 49 million in 2025.

Securing Systems Before a Breach

Sterling said the proposed Cybersecurity Act is intended to establish preventive responsibilities rather than replace Jamaica’s existing Cybercrimes Act.

“What we are introducing is a cybersecurity act that looks at ensuring that entities and individuals are held to account, to put systems in place to ensure that their systems that collect, store and process data… are secured and where there are breaches, there are penalties,” Sterling told the Jamaica Information Service.

He said Jamaica currently has no dedicated Cybersecurity Act. Sterling distinguished the proposed legislation from the Cybercrimes Act, explaining that cybercrime legislation addresses offences when a system has already been breached, while the proposed Cybersecurity Act would focus on ensuring systems are secured before a breach takes place.

Critical Infrastructure and Mandatory Standards

The latest announcement builds on legislative work outlined by Wheatley during the 2026/27 Sectoral Debate.

According to the Government’s previously announced framework, the legislation is expected to establish a formal system for designating and protecting critical information infrastructure and place Jamaica’s permanent cybersecurity authority, the National Cybersecurity Directorate, on a statutory foundation.

The proposed law is also expected to mandate minimum cybersecurity standards across regulated sectors, create obligations for reporting cyber incidents and responsibly disclosing vulnerabilities, and regulate cybersecurity service providers operating in Jamaica.

New Council Proposed to Coordinate Cyber Defence

The Government is also seeking Cabinet approval to establish the National Cybersecurity Coordination and Assurance Council, or NCCAC, within the Office of the Prime Minister.

The council is also expected to coordinate deployment of a US$10-million Inter-American Development Bank and United States Agency for International Development investment under the Strengthening Cybersecurity in Jamaica Project.

Legislation Still Faces a Lengthy Process

Despite the work already completed, passage of the Cybersecurity Act is not imminent.

Sterling said the research stage has been completed, but Cabinet approval for drafting instructions is still required. The legislation would then have to proceed through the Legislative Committee, review and the wider lawmaking process.

He said the proposed council would seek to reduce that timeline to two years, describing that target as a “best hope.”

Cyber Awareness Alongside New Laws

The legislative push coincides with National Cybersecurity Awareness Month, being observed in October 2026 under the theme “One Nation, Cyber Strong.”

For businesses, public agencies and other organizations that handle data, the proposed Cybersecurity Act could eventually introduce enforceable responsibilities for how systems are protected before an attack succeeds.

Jamaica Today is Vision Newspaper – The Caribbean Update‘s ongoing coverage of national development, technology, cybersecurity, governance and public affairs across Jamaica.

Follow Vision Newspaper on social media @VisionNewspaper for more Caribbean news.

The post Jamaica Moves Toward Cybersecurity Act After Millions of Attempted Cyberattacks appeared first on Vision Newspaper.