DPMAS· Data Privacy and Management Advisory Services
DPMAS · BARBADOS · MMXXVI
Barbados DPA 2019-29

A Caribbean privacy, cybersecurity, and AI governance practice.

Anchored in the Data Protection Act 2019-29 (Barbados).

DPMAS advises Caribbean boards, regulators, and operators on the implementation work that turns the Act from a published statute into a working regime — privacy, cybersecurity, and AI governance, at practitioner level.

Engage the practice Read CyberPulse →
I. What we do

Four pillars, one practice.

Independent advisory across the lifecycle of data and digital risk in the Caribbean.

i.

DPO-as-a-Service

Outsourced Data Protection Officer cover for organisations that need statutory accountability without a full-time hire.

More on the lead product →
ii.

Data Protection Compliance

DPA 2019-29 readiness — DPIAs, records of processing, breach response, and the policy infrastructure that makes them defensible.

Read the approach →
iii.

Cybersecurity Advisory

Board-level security posture, vendor and third-party risk, and incident-readiness review — calibrated to the threat surface a Caribbean organisation actually faces.

Read the approach →
iv.

AI Governance & Readiness

Structured assessment and oversight for organisations preparing for sovereign AI deployment — governance before procurement, not after.

Read the approach →
II. Where we work
Financial Services·Government·Telecommunications·Healthcare·Education·Media
III. The practice

A serving practitioner — not an agency.

DPMAS work is led by Steven A. Williams, with engagement teams assembled to the file.

Read the full practice profile →
IV. Editorial

Reading the regime from inside the file.

A working column, not a content programme.

CYBERPULSE

A column in Barbados Today

Privacy, cybersecurity, and digital sovereignty — read from the practitioner's desk.

CyberPulse is Steven's standing column on the implementation realities of the Data Protection Act 2019-29, Caribbean cyber posture, and the policy infrastructure that the region is still building. Written for executives, regulators, and the engaged public — without the boosterism.

Published in Barbados Today Read the archive →
V. Engage

Three ways to start.

Each path opens with a conversation. Pricing follows scope, not the inverse.

I.

AI Readiness Assessment

A structured DPMAS engagement for organisations preparing to deploy AI — governance, data-flow mapping, and risk artefacts that survive procurement and audit.

Open the conversation →
II.

DPO Retainer

Ongoing Data Protection Officer cover under a fixed monthly retainer — board-level reporting, regulator interface, and statutory accountability without a full-time hire.

Enquire about the retainer →
III.

Project Engagement

Scoped advisory — DPIA, compliance gap review, breach response support, board briefing, cybersecurity posture review. Fixed scope, fixed fee.

Scope a project →

Or write to Steven directly.

Email is the fastest path. A short note describing the file and the deadline is usually enough to determine whether a conversation makes sense.

Principal Steven A. Williams · DPMAS Office #14 Bannatyne Gardens, Christ Church, Barbados Direct T 246.233.0090
E steven@dataprivacy.bb