Saint Lucia has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Saint Lucia enacted the Electronic Transactions Act No. 16 of 2011, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Saint Lucia enacted the Electronic Transactions Act No. 16 of 2011, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

The Electronic Transactions Act 2011 establishes a safe harbour regime for intermediaries for copyright infringements. Pursuant to Art. 47, an intermediary or an internet service provider who provides a conduit is not liable for the content of electronic records that indicate a likelihood of civil or criminal liability if the intermediary or internet service provider: (i) had no actual knowledge of such information; or (ii) on acquiring actual knowledge or becoming aware of such facts, followed the takedown procedures required by the Regulations as soon as possible.

The Electronic Transactions Act 2011 establishes a safe harbour regime for intermediaries beyond copyright infringements. Pursuant to Art. 47, an intermediary or an internet service provider who provides a conduit is not liable for the content of electronic records that indicate a likelihood of civil or criminal liability if the intermediary or internet service provider: (i) had no actual knowledge of such information; or (ii) on acquiring actual knowledge or becoming aware of such facts, followed the takedown procedures required by the Regulations as soon as possible.

It is reported that Saint Lucia imposes an identity requirement for SIM registration. Anyone wanting to purchase a SIM card has to provide their national ID card or a passport in the case of foreigners, to activate a new prepaid SIM card.

According to Section 47 of the Data Protection Act, any individual or company that seeks to collect, transfer, or process personal data must have a certification as a data controller. The data controller is the representative in charge of processing personal data and must make an application for registration to the Commissioner. The Commissioner can reject the license if it reasonably believes that (a) the particulars proposed for inclusion in an entry in the register are insufficient or any other information required by the Commissioner either has not been furnished or is insufficient; (b) appropriate safeguards for the protection of the privacy of the data subjects concerned are not being, or will not continue to be, provided by the data controller; or (c) the person applying for registration is not fit and proper in the determination of the Commissioner.

There are reportedly 21 investment areas, including trading imports, that are designated exclusively for Saint Lucian nationals. However, authorities have observed that this restriction is not consistently enforced. Exemptions have been reported for substantial investments or when local investors either lack business interest or do not possess the necessary technology.

Saint Lucia has not appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments.

It is reported that the National Telecommunications Regulatory Commission, the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

According to Art. 45 of the Data Protection Act 2011, data shall not be transferred to a country or territory outside Saint Lucia unless the country or territory ensures an adequate level of data protection or the Commissioner has authorised the data controller to transfer the data abroad. Alternatively, personal data can be transferred abroad under certain exceptions, which are listed in Art. 45.2. These include cases in which (i) the data subject has given consent to the transfer; (ii) the transfer is necessary to safeguard national security; (iii) the matter concerns public security; (iv) the transfer is made on such terms as may be approved by Commissioner as ensuring the adequate safeguards for the protection of the rights of the data subject.

Saint Lucia has not joined any agreement with binding commitments to open transfers of data across borders.

The Data Protection Act provides a comprehensive regime of data protection in St. Lucia.

According to Art. 14 of the Telecommunications (Quality of Service) Regulations 2007, telecommunications providers shall retain quality of service data, all measurements and related records for a minimum period of 18 months after the end of the reporting period or until the National Telecommunications Regulatory Commission may direct.

It is reported that foreign investment projects in Saint Lucia require prior government approval. Non-CARICOM companies seeking to conduct business in Saint Lucia with an ownership stake exceeding 49% are required to obtain a trade licence from the Ministry of Commerce, Manufacturing, Business Development, Cooperatives and Consumer Affairs or through Invest Saint Lucia (ISL). As also stated in Arts. 5 and 6 of the 1985 Trade Licences Act, licence applications are examined by the Trade Licence Advisory Board, which submits a recommendation to the Minister, who takes the final decision.