#
A comprehensive statute and named regulator are confirmed via secondary/bill sources, but primary-instrument verification (gazette, commencement order, confirmed Bill passage) is outstanding.
Sub-modules (5)
Regulator And AuthorityAmber
The Information and Data Protection Commission is constituted as a public office consisting of a Commissioner and such Deputy Commissioners and officers as necessary, and is given information-production, audit, and contravention-notice powers under the 2024 reform Bill.
Claims (2):
- CLM-BZ-002 (claim on file)
- CLM-BZ-004 (claim on file)
Act And InstrumentsAmber
Cap. 43:14 is the current operative instrument; the 2024 Bill would repeal and re-enact it with transitional/savings provisions preserving continuity of decisions, proceedings and administrative structures.
Claims (3):
- CLM-BZ-001 (claim on file)
- CLM-BZ-003 (claim on file)
- CLM-BZ-005 (claim on file)
Material ScopeRed
No sourced text establishing the precise material-scope test (what data/processing is caught) under Cap. 43:14 or the 2024 Bill was located in this pass.
Absence provenance: unavailable. Searched: C, a, p, ., , 4, 3, :, 1, 4, , /, , D, a, t, a, , P, r, o, t, e, c, t, i, o, n, , B, i, l, l, , 2, 0, 2, 4, , m, a, t, e, r, i, a, l, -, s, c, o, p, e, , a, n, d, , d, e, f, i, n, i, t, i, o, n, s, , p, r, o, v, i, s, i, o, n, s.
Territorial ScopeRed
No sourced text establishing an extraterritorial/targeting-and-monitoring test analogous to GDPR Art 3(2) was located for Belize.
Absence provenance: unavailable. Searched: C, a, p, ., , 4, 3, :, 1, 4, , /, , B, i, l, l, , 2, 0, 2, 4, , t, e, r, r, i, t, o, r, i, a, l, -, s, c, o, p, e, , c, l, a, u, s, e.
Regulator Registration And FilingRed
No sourced provision on controller registration, notification, or fee obligations to the Commission was located.
Absence provenance: unavailable. Searched: C, a, p, ., , 4, 3, :, 1, 4, , /, , B, i, l, l, , 2, 0, 2, 4, , r, e, g, i, s, t, r, a, t, i, o, n, , o, r, , f, e, e, , p, r, o, v, i, s, i, o, n, s.
The Act's territorial scope extends beyond entities physically established in Belize. Under section 3, it applies to controllers and processors established in Belize in the ordinary course, but it also reaches extraterritorially to processing of Belize data subjects' personal data undertaken by non-established controllers or processors who offer goods or services to those data subjects, a formulation confirmed from a primary Government of Belize source and structurally comparable to the extraterritorial reach found in the EU General Data Protection Regulation and comparable Caribbean and Latin American omnibus statutes. This means an entity with no physical or corporate presence in Belize can nonetheless fall within the Act's scope purely by virtue of offering goods or services to persons located in Belize.
What remains unconfirmed this cycle is the operational status of the Commissioner's office itself: whether a Commissioner has been appointed and is actively exercising the functions set out in the Act, and whether any registration regime for controllers or processors has been brought into operation, were not confirmed from available sourcing. The Act's substantive framework — its establishment of a dedicated regulator with defined extraterritorial reach — is well-confirmed; the practical, day-to-day operation of that framework is the open question carried forward.
Outlook
Subsequent cycles should seek primary-source confirmation of whether the Data Protection Commissioner's office is presently staffed and operational, and whether it has issued any guidance, registration requirements, or enforcement notices since the Act came into force in November 2021. Until that operational confirmation is reached, Belize's data protection framework should be read as a well-established, extraterritorially-reaching statutory structure whose practical enforcement posture has not yet been independently verified.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.