What Is Personal Data Protection Act 2025 (P.L. 2025-43)?
The Marshall Islands enacted the Personal Data Protection Act 2025 as P.L. 2025-43. The supplied summary scopes the Act to core Government ministries and agencies and identifies EPSSO as the competent authority. Residents are described as having agency-level complaint processes. The printed Act gives 7 October 2025 as a commencement date, but section 418 requires effectiveness twelve months after constitutional certification. The certification date was not located in the supplied research, so this profile describes the Act as enacted without presenting a confirmed operative date. A public EPSSO complaint endpoint and any fixed response timeline were also not located. The available evidence is therefore a bounded profile of the enacted text and its stated institutional and complaint framework, not a complete operational review.
At a glance
- Full name
- Personal Data Protection Act 2025 (P.L. 2025-43)
- Short code
- Marshall Islands PDPA 2025
- Jurisdiction
- Marshall Islands
- Enacted
- 2025
- Last major update
- The printed commencement date is 7 October 2025, but section 418 ties effectiveness to twelve months after constitutional certification; the certification date was not located
- Regulator
- EPSSO (competent authority)
- Private right of action
- Limited
- Statutory citation
- Personal Data Protection Act 2025 (P.L. 2025-43)
Scope, who Marshall Islands PDPA 2025 covers
Protected data
Data subject rights
Right to use the agency-level complaint process described for residents
Specific access, correction, erasure, objection, and other data-subject rights were not enumerated in the supplied summary
Notable features
The Act is enacted, but commencement is not stated as confirmed here: the printed date is 7 October 2025, while section 418 requires effectiveness twelve months after constitutional certification and that certification date was not located. EPSSO is identified as competent authority, but a public complaint endpoint was not located.
Enforcement & penalties
Regulator: EPSSO (competent authority)
Penalties: The supplied summary and sources did not provide a consolidated penalty schedule or amount, so no penalty figure is stated here.
Private right of action: The supplied summary identifies agency-level complaint processes but does not establish a separate private damages action or other standalone private-right-of-action rule.
Relevance to data brokers
No Marshall Islands-specific data-broker, people-search, or public-record removal route was located. The Act's Government-focused scope and agency-level complaint processes should not be presented as a confirmed commercial broker opt-out process.
Generate requests in under 60 seconds
Explore 1,034 US/global data brokers
FAQ
Is the Marshall Islands Personal Data Protection Act 2025 in force?+
The Act is enacted, but a confirmed operative date was not established. The printed date is 7 October 2025, while section 418 requires effectiveness twelve months after constitutional certification and the certification date was not located.
Who is identified as the competent authority?+
The supplied summary identifies EPSSO as the competent authority and describes agency-level complaint processes for residents.
Is there a Marshall Islands data-broker opt-out route?+
No Marshall Islands-specific data-broker, people-search, or public-record removal route was located in the supplied research pass.
Official sources & citations
Other international privacy regimes
Marshall Islands PDPA 2025 sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index: