A G5 Cyber Security initiative Caribbean understanding. International experience.
G5 Cyber Security | Data Protection
Bonaire, Sint Eustatius and Saba

Netherlands national flag for the Caribbean Netherlands DATA PROTECTION & PRIVACY · BONAIRE, SINT EUSTATIUS AND SABA

Protect personal data.
Build lasting trust.

Make privacy part of the way you do business. Practical advice and hands-on support for organisations in Bonaire, Sint Eustatius and Saba.

✓

Clear advice. Practical steps.
Support from G5 Cyber Security.

Flag for Bonaire, Sint Eustatius and Saba Bonaire, Sint Eustatius and Saba PERSONAL DATA · PEOPLE · TRUST
✓
PRIVACY STARTS WITH PEOPLE Their information.
Your responsibility.
✳
Understand your data ✳ Reduce privacy risks ✳ Prepare your people ✳ Build confidence

PRIVACY IN BONAIRE, SINT EUSTATIUS AND SABA

Three islands, clear responsibility

Distinguish operations in Bonaire, Sint Eustatius and Saba. Document sharing between island offices and organisations in the European Netherlands.

CBP BES explains that the Personal Data Protection Act BES (Wbp BES) applies in the Caribbean Netherlands. Do not assume European Netherlands rules apply identically; assess the local framework and cross-border processing separately.

Read local guidance and sources ↗

A CLEARER WAY FORWARD

Good privacy practices.
Stronger relationships.

Your customers, employees and partners trust you with their information. Knowing where it goes, who can access it and how it is protected helps you honour that trust.

We help you understand your current practices, identify gaps and turn privacy requirements into workable everyday processes.

Find your starting point ↗

HOW WE CAN HELP

Privacy support that
fits your organisation.

From your first review to putting improvements in place, choose support around the work you need to do.

01 / STRATEGY
◎

Privacy programme advisory

Typical output: A priorities workshop, a responsibilities outline and a practical improvement roadmap.

Give your privacy work direction, with clear responsibilities, priorities and a practical improvement plan.

Discuss your programme ↗
02 / VISIBILITY
⌘

Personal data mapping

Typical output: A structured inventory of personal data, its purposes, storage locations, recipients and retention arrangements.

Understand what personal data you collect, where you keep it, why you use it and who you share it with.

Understand your data ↗
03 / GOVERNANCE
▤

Document review & drafting

Typical output: Reviewed or drafted documents, with a change summary and points requiring management decisions.

Review or develop privacy notices, policies and procedures that reflect how your organisation works.

Review your documents ↗
04 / ASSESSMENT
◈

Privacy impact assessments

Typical output: A documented assessment of processing risks, proposed safeguards and remaining actions.

Identify privacy risks in new systems, services and activities, then plan measures to address them.

Assess a project ↗
05 / PREPARATION
⛨

Data breach management

Typical output: A response procedure, escalation contacts and a preparation workshop, where included in scope.

Prepare a clear response process for a personal data breach, including responsibilities and escalation.

Improve your readiness ↗
NOT SURE WHERE TO START?

Let’s make
the next step
clear.

Tell us about your organisation and the challenge you want to solve.

Speak with our team ↗

FROM QUESTIONS TO ACTION

A practical path to
better data protection.

Start with a conversation. Leave with a clearer view of what your organisation needs to do next.

01

Understand

Discuss your organisation, the information you handle and your immediate concerns.

02

Assess

Agree the scope and review relevant processes, systems and documents.

03

Plan

Receive findings and prioritised recommendations, with an agreed proposal for support.

04

Improve

Put agreed changes into practice and help your team maintain them.

▣ PERSONAL DATA
People Processes Technology PRIVACY BY DESIGN

BUILT AROUND REAL BUSINESS

Make privacy part
of everyday work.

Whether you manage guest bookings, customer records or employee information, data protection should be part of how your team operates.

  • Know what personal data you hold.
  • Give staff clear responsibilities.
  • Review access, retention and sharing.
  • Prepare for questions and incidents.
Talk through your priorities ↗

CHOOSE YOUR STARTING POINT

What do you need next?

Get ongoing support

Discuss periodic reviews, advice and follow-up support under an agreed scope.

Discuss your needs ↓

YOUR WORK. YOUR PRIVACY RISKS.

Support for organisations across Bonaire, Sint Eustatius and Saba.

Hotels & tourism

Review guest identity records, booking platforms, overseas agents and access to reservation information. Limit unnecessary copies of passports.

Financial services

Map identity checks, client files and transfers to service providers. Reconcile privacy practices with record-keeping and regulatory obligations.

Healthcare

Review patient confidentiality, access to clinical records and secure communication. Identify sensitive information shared with external providers.

Professional services

Manage client documents, employee records and shared workspaces. Review who can access files when staff or engagements change.

Small businesses

Start with customer lists, staff files, cloud storage and clear responsibilities. Build a manageable action plan around your resources.

A QUICK STARTING POINT

How prepared are you?

Answer six questions about your current practices. This is a planning aid, not a compliance assessment. Answers stay in this browser tab and are not submitted.

Do you keep a current record of the personal data you use?
Do your privacy notices describe your actual practices?
Is someone responsible for privacy decisions?
Do you review access and remove permissions when people leave?
Have you agreed retention and secure deletion arrangements?
Do staff know how to report a suspected breach?

PLAN YOUR PROJECT

Clear scope.
Considered pricing.

What affects the quote?

Staff numbers, data volumes, processing activities, systems, locations, suppliers, existing documentation and the urgency of the work.

How is work delivered?

Agree objectives and scope, collect information, review evidence, discuss findings and deliver the agreed outputs. Implementation and follow-up are included only where agreed.

How long will it take?

Timing depends on scope, availability of records and access to the right people. We agree milestones before work begins.

Request a scoped quotation ↗

USEFUL BEFORE YOU CONTACT US

Prepare with confidence.

Download preparation checklist ↓

Build everyday habits

Short guides on data collection, access, retention, suppliers and information requests.

Explore resources ↗

Concerned about a breach?

Find immediate preparation steps and a direct route to contact G5.

Breach support ↗

A LITTLE MORE CLARITY

Your questions,
answered.

Need to discuss a specific situation?

Contact our team ↗
Who is this support for?

Organisations in Bonaire, Sint Eustatius and Saba that collect or use personal information, including businesses, charities and other organisations. We agree the scope around your size, activities and priorities.

Where should we start?

A consultation helps us understand your concerns and existing arrangements. From there, we can agree whether a review, data mapping exercise or a focused project is the most useful next step.

Can you review our existing privacy documents?

Yes. We can review relevant notices, policies and procedures, identify gaps and help draft improvements based on your actual working practices.

Can you support international privacy requirements?

We can discuss requirements relevant to your activities and international relationships, including GDPR where applicable. The scope and any specialist legal input should be agreed during consultation.

What happens after the first meeting?

We clarify your objectives and any information needed, then provide an agreed scope, proposed deliverables and pricing before project work begins.

Can the work be delivered remotely?

We can discuss remote interviews, document review and workshops. Any on-site work, travel and secure evidence exchange must be agreed in the proposal.

Who needs to take part?

Usually the person responsible for privacy, IT, HR and representatives of teams handling personal data. We agree participants around your scope.

How is confidential information handled?

Agree confidentiality terms, authorised contacts and a suitable evidence-sharing method before exchanging sensitive records. Send only the evidence needed for the review.

Can you help after the assessment?

Yes. Ask for implementation support, staff briefings or periodic reviews to be included in the quotation.

Is this legal advice or a compliance certification?

The site provides general information and practical consulting support. It does not certify compliance or replace advice from a qualified lawyer on your legal obligations.

PRIVACY SUPPORT FOR BONAIRE, SINT EUSTATIUS AND SABA

Tell us what you need.
Request a quotation.

Share your organisation’s details and the support you are looking for. Our team will review your request and contact you to clarify the scope and pricing.

  • Your organisation and contact details.
  • The privacy services you need.
  • Your priorities and preferred timeframe.

Please leave out passwords, personal records and other sensitive information.

Prefer email? Contact support ↗
REQUEST A QUOTATION BONAIRE, SINT EUSTATIUS AND SABA

Read G5’s privacy policy before sharing your details.

YOUR NEXT STEP

Better privacy starts
with a conversation.

Tell us where you are today. Let’s work out what comes next.

Book an online meeting ↗ Request a quotation ↗