Fifteen CARICOM states scored on the same six governance dimensions, benchmarked against the European Union, the United States and the United Kingdom. Every score is a function of public legal status, and each one carries its source and the date it was checked. Select any jurisdiction for the detail behind its number.
Each jurisdiction is scored from zero to two on six dimensions: a data protection law, a supervisory authority, a national AI policy, a sector cybersecurity framework, a breach notification duty, and a cross-border transfer regime. Two means in force and operating. One means enacted but not yet in force, or only partly so. Zero means none identified. The absence of a law is recorded as a finding, sourced to the trackers that list it.
Two limits to read honestly. For several small states the sector cybersecurity score rests on regional supervisory guidance from the Eastern Caribbean Central Bank rather than a national rule, and it is marked as such. Where a statute is on the books but has never been commenced, the authority it provides for is scored as not established. Scores move only when the underlying legal status changes, so the index is reviewed each quarter rather than continuously.