Marshall Islands · Reviewed September 2026

What Is Personal Data Protection Act 2025 (P.L. 2025-43)?

The Marshall Islands enacted the Personal Data Protection Act 2025 as P.L. 2025-43. The supplied summary scopes the Act to core Government ministries and agencies and identifies EPSSO as the competent authority. Residents are described as having agency-level complaint processes. The printed Act gives 7 October 2025 as a commencement date, but section 418 requires effectiveness twelve months after constitutional certification. The certification date was not located in the supplied research, so this profile describes the Act as enacted without presenting a confirmed operative date. A public EPSSO complaint endpoint and any fixed response timeline were also not located. The available evidence is therefore a bounded profile of the enacted text and its stated institutional and complaint framework, not a complete operational review.

Written byRahul Kandoriya·Founder, OfflistMe·Last updated September 6, 2026

At a glance

Full name: Personal Data Protection Act 2025 (P.L. 2025-43)
Short code: Marshall Islands PDPA 2025
Jurisdiction: Marshall Islands
Enacted: 2025
Last major update: The printed commencement date is 7 October 2025, but section 418 ties effectiveness to twelve months after constitutional certification; the certification date was not located
Regulator: EPSSO (competent authority)
Private right of action: Limited
Statutory citation: Personal Data Protection Act 2025 (P.L. 2025-43)

Scope, who Marshall Islands PDPA 2025 covers

Core Government ministries and agencies within the scope described for the Personal Data Protection Act 2025; the supplied summary did not establish a broader private-sector or territorial scope.

Protected data

Personal data addressed by the Act; the supplied summary did not itemize more detailed protected-data categories.

Data subject rights

Right to use the agency-level complaint process described for residents

Specific access, correction, erasure, objection, and other data-subject rights were not enumerated in the supplied summary

Notable features

The Act is enacted, but commencement is not stated as confirmed here: the printed date is 7 October 2025, while section 418 requires effectiveness twelve months after constitutional certification and that certification date was not located. EPSSO is identified as competent authority, but a public complaint endpoint was not located.

Enforcement & penalties

Regulator: EPSSO (competent authority)

Penalties: The supplied summary and sources did not provide a consolidated penalty schedule or amount, so no penalty figure is stated here.

Private right of action: The supplied summary identifies agency-level complaint processes but does not establish a separate private damages action or other standalone private-right-of-action rule.

Relevance to data brokers

No Marshall Islands-specific data-broker, people-search, or public-record removal route was located. The Act's Government-focused scope and agency-level complaint processes should not be presented as a confirmed commercial broker opt-out process.

Generate requests in under 60 seconds

Generate removal requests for 1,034 US/global profiles, $9

OfflistMe helps draft opt-out requests using the details you choose. Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

Generate My Opt-Out Requests

FREE

FAQ

Is the Marshall Islands Personal Data Protection Act 2025 in force?+

The Act is enacted, but a confirmed operative date was not established. The printed date is 7 October 2025, while section 418 requires effectiveness twelve months after constitutional certification and the certification date was not located.

Who is identified as the competent authority?+

The supplied summary identifies EPSSO as the competent authority and describes agency-level complaint processes for residents.

Is there a Marshall Islands data-broker opt-out route?+

No Marshall Islands-specific data-broker, people-search, or public-record removal route was located in the supplied research pass.

Official sources & citations

Other international privacy regimes

Marshall Islands PDPA 2025 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows:

Related concepts & guides

Privacy research hubBrowse every law explainer and source ledger Data removal by countryBrowse jurisdiction-specific removal guides US Privacy Laws MatrixAll US state laws compared What is GDPR?EU framework What is CCPA?California baseline What is a data broker?Full explainer Privacy glossaryTerms defined What is GPC?Browser opt-out signal What is FCRA?US consumer reporting law What is FTC Act §5?US privacy enforcement Check broker exposureSee which brokers may have your info One-time data removalPay once, no subscription needed Start for $9Prepare reviewable removal requests