JAMAICA | No Cybersecurity Act, No AI Policy, No Excuses: Jamaica Exposed as Caribbean Attacks Surge

Opposition MP Christopher Brown delivers a pointed parliamentary warning: while cyber attacks grow at 25 per cent annually across the Caribbean, Jamaica remains without the legal architecture to compel a single hospital, port, or utility to meet minimum security standards.

MONTEGO BAY, Jamaica, June 4, 2026 - Jamaica's digital infrastructure stands exposed. As cyber attacks targeting Caribbean nations escalate at an alarming 25 per cent annually, the island still lacks the cornerstone legislation that would give the Government the legal muscle to enforce cybersecurity standards across critical sectors.

That uncomfortable truth was laid bare on the floor of Parliament on Wednesday by Christopher Brown, MP, the Opposition Spokesperson on Science, Technology and Digital Transformation, during his maiden sectoral contribution — a debut that wasted no time finding its target.

Brown's central indictment was surgical: Jamaica has no Cybersecurity Act, and without one, the Government possesses no enforceable authority to compel hospitals, ports, or public utilities to meet minimum digital security standards. The legislation that would close this gap has a projected target date of 2027 — a full nine years after Singapore enacted equivalent protections in 2018.

"You can train the fire brigade. You still need the building code. Only a Cybersecurity Act can give the Government enforceable authority. Nine years behind Singapore is not a gap. It is a choice." — Christopher Brown, MP, Opposition Spokesman on Science, Technology & Digital Transformation

That phrase — a choice — landed with intent. Brown was not merely cataloguing legislative tardiness; he was assigning accountability. In a region where digital attacks on financial systems, government infrastructure, and health services have accelerated sharply, inaction is itself a policy decision, and Brown made clear he considers it an unacceptable one.

The Human Cost in Annotto Bay

To cut through the abstraction of policy debate, Brown anchored his argument in a constituent from the Iter Boreale district in Annotto Bay — a call centre worker and mother of two whose livelihood depends on Jamaica's Business Process Outsourcing sector. She is not a statistic. She is one of tens of thousands of Jamaicans employed in BPO work, and the AI systems being developed globally are already capable of replacing her role.

The Government's response to this displacement threat? An AI Task Force established in August 2023. Three years on, Jamaica still has no enacted national artificial intelligence policy. No funded reskilling programme. No named pathway from displacement to new employment.

"Not a task force. Not a workshop. A specific, funded, named programme: here is where you go, here is what you learn, here is who pays, here is what job is waiting on the other side."

— Christopher Brown, MP

It is a demand grounded in the reality of working-class Jamaica — a constituency that cannot afford to wait on bureaucratic timelines while the technology that threatens their income continues to evolve at speed.

A Region Under Digital Siege

The regional backdrop against which Brown spoke makes his warnings all the more urgent. Caribbean nations have emerged as increasingly attractive targets for cybercriminals, with the compounding growth rate of 25 per cent annually reflecting both the region's expanding digital footprint and the inadequacy of its legislative and institutional defences. The Caribbean's integration into global financial systems, combined with relatively nascent cybersecurity frameworks, has created a vulnerability window that adversarial actors — state-sponsored and criminal alike — are actively exploiting.

Jamaica, as the region's third-largest economy and a hub for financial services and tourism-related digital transactions, sits squarely in the crosshairs. A successful attack on a major port, hospital network, or financial institution would not be an abstract governance failure — it would be a cascading national crisis.

Two Demands, One Deadline: Now

Brown closed with two specific, time-bound calls to action. First, that the Government pass the Cybersecurity Act with a published milestone timeline — not another aspirational target, but a binding public commitment with measurable progress markers. Second, that an AI policy be enacted with a hard deadline and a named, fully funded reskilling programme accessible to displaced workers, not a framework document gathering digital dust in a ministerial inbox.

What made Brown's contribution notable was not only its content, but its timing and tone. A maiden parliamentary speech is typically the moment for measured introductions and broad strokes. Brown chose precision instead — figures, comparators, constituent faces, and specific legislative demands. It was the kind of debut that signals an Opposition spokesman who intends to be heard, not simply counted.

The Government now has its answer to absorb. Whether it responds with legislation or silence will say as much about Jamaica's digital future as any policy document ever could.

— 30 —