Nevis's Premier Wants Nine Caribbean AI Protocols. The Federation's Data Law Has No Start Date We Can Find.

Mark Brantley, Premier of Nevis, asked on 27 September 2026 for CARICOM Heads of Government to meet on AI and agree common rules on nine topics, from personal data to deepfakes. His own Federation passed a Data Protection Act in 2018, but as far as CAIRMC can verify it has no commencement date, so the second protocol on his list, personal data, has no working local law beneath it as far as we can find. Any office in St Kitts and Nevis that uses AI can close part of that gap itself, this week, with a written test described below.

What happened in the last fortnight

Brantley's piece is titled "AI Will Not Wait for the Caribbean: The Time for Regional Action Is Now". Nevis Pages carried it on 27 September 2026 and SKN Pulse ran it on 29 September. He writes: "This is now a critical global governance issue, and the Caribbean must have a seat at the table." He asks for a Caribbean framework covering responsible use of AI, the protection and ownership of personal data, cybersecurity, intellectual property, government procurement of AI systems, AI in education and healthcare, protection against algorithmic discrimination, safeguards against deepfakes and disinformation, and clear requirements for transparency and human oversight.

He also warns that if the region does not take part, "the rules governing this technology will be written elsewhere and handed to us afterwards." He wants the Caribbean to be a rule-maker and not only a rule-taker.

Two other events frame the op-ed. On 7 July 2026 the 126th Special Meeting of the CARICOM Council for Trade and Economic Development on ICT endorsed the UNESCO Caribbean AI Policy Roadmap, which was built with more than 1,000 stakeholders. Then on 21 September the IDB Group convened heads of state and technology leaders at the UN General Assembly. Our earlier note on the roadmap is here; this article asks what the nine-protocol proposal means for a two-island Federation of 46,922 people.

What the evidence says

Start with the policy position. A Cullen International report dated 30 September 2026 covers 13 Caribbean countries, St Kitts and Nevis among them. It found that only two, Cuba and the Dominican Republic, have adopted national AI strategies, and that none of the 13 has an AI-specific regulatory framework. We read the public summary, not the full benchmark, so we cannot say how Cullen scored each country.

Next, the money and the jobs. The IDB's 21 September release says broad AI adoption "and large labor-productivity effects could raise regional GDP by 5.1% after a decade". With limited adoption and small productivity effects, it says, GDP "would rise by only 0.3%". Both figures come from a forthcoming IDB flagship report due in November 2026, which we have not read. It also says wages could rise 2.3% to 5.3% if workers can move between jobs, and fall 13.5% to 20.9% if they cannot. The release lists the governments in the room: The Bahamas, Bolivia, Brazil, Chile, Colombia, the Dominican Republic, Guatemala, Guyana, Panama, Paraguay, Suriname and Uruguay. In the release text we found no mention of St Kitts and Nevis or any other OECS state.

The labour estimate comes from an older source. An ILO and World Bank working paper from 31 July 2024 puts 26–38% of jobs in Latin America and the Caribbean as exposed to generative AI. Within that, 8–14% could gain productivity, 2–5% face full automation, and 13–22% could go either way. Up to half of the jobs that could gain are held back by gaps in digital access, which the ILO page puts at about 17 million jobs. The page we read does not list Caribbean countries, so applying it to an island economy is our inference.

Finally, the Federation's own numbers. World Bank data gives a population of 46,922 in 2025, GDP of $1.18 billion, GDP per capita of $25,223, and 77% of people using the internet in 2024. So most people are online, and a small public service has to write rules for a technology it did not build.

The method: Preparation Asymmetry

Adrian Dunkley's Preparation Asymmetry names the structural gap between nations that build AI systems and nations that inherit them. Caribbean governments are mostly in the inheritance position, so rules, training data and model values arrive from elsewhere.

Apply it to the three events above and a pattern shows. The IDB convening put twelve governments in front of four large model builders, so our inference is that those twelve have at least begun a conversation with the people who write the defaults. Cullen's report says none of its 13 countries has an AI-specific regulatory framework, though many have appointed organisations or officers to coordinate AI efforts. Our reading is that, outside rooms like the IDB's, the defaults still arrive in vendors' terms of service. Brantley's proposal is an attempt to move the region from the inheriting side to the drafting side, and the nine items he lists are the places where inherited defaults bite hardest: your data, your procurement, your children's classroom, your clinic.

The method also gives a practical question for any ministry. For each protocol on his list, who wrote the current default? If the answer is a vendor's terms of service, you are inheriting. If it is a Gazette notice, an Act or a circular with your name on it, you are drafting.

What this means for St Kitts and Nevis

The Federation is two islands with one Parliament and a separate Nevis Island Administration, and Brantley speaks as Nevis's Premier. That structure matters for AI. A rule on procurement or education could be made in Basseterre, in Charlestown, or in both, and the op-ed's call for regional protocols does not say how a protocol would sit alongside two layers of government at home.

The data protection position is the clearest local test. The UWI data protection resource records that the Data Protection Act, 2018 was passed by the National Assembly on 4 May 2018 and gazetted on 7 June 2018. It says the Act comes into force "on a day to be fixed by the Minister by Order published in the Gazette", and that as of February 2025 no such order had been published. We have not seen one since, though we could not rule it out, so check with the Attorney General's chambers before relying on either reading.

Picture a front-desk manager at a Frigate Bay guesthouse who pastes a guest's passport details and booking history into a free chatbot to draft a reply. This is an illustration, not a real person. If the Act's duties are not yet in force, as far as we can find, we cannot point the guest to a statutory duty on where that data is stored, and we have not confirmed which office would hear a complaint. The guest's protection depends on the manager's judgment and the vendor's terms. Our note on Jamaica's data protection law and AI erasure shows how much harder it gets even where the law is in force.

There is a sister-site angle too. StarApple AI, the Caribbean's first AI company, and the Caribbean AI Association both work on the regional readiness Brantley describes, and Adrian Dunkley, who founded StarApple AI, published the Preparation Asymmetry framework used above. A small state does not need to draft nine protocols alone. It needs to know which of them it can borrow.

The upside

Regional rules help a country of 46,922 people more than a country of forty million, because the cost of drafting is shared. A common procurement protocol could let a permanent secretary in Basseterre ask a vendor the same questions that one in Kingston or Georgetown asks, so the vendor answers once. Common transparency rules for chatbots mean a guest, a patient or a taxpayer can tell when they are talking to a machine.

The IDB's wage range also has a hopeful end. The same analysis that warns of a 20.9% fall gives a rise of up to 5.3% where workers can move. For tourism and services, which are mostly where small islands earn, retraining and portable skills are the variable a government controls.

The risks

The first risk is data leaving the Federation without a legal duty to protect it. Hotel staff, bank clerks, nurses and civil servants who paste personal details into foreign AI tools bear the harm, because a leaked passport scan or medical note cannot be recalled, and, if the Act's duties are not yet in force, the person affected may have no statutory route to complain. Italy's data protection authority cited a 20 March 2023 breach affecting user conversations and payment information when it ordered OpenAI to limit processing of Italian users' data on 30 March 2023. A guardrail is a written rule, adopted by each employer now, listing which data may never enter a public AI tool.

The second risk is the labour downside. The IDB's range has wages falling 13.5% to 20.9% where workers cannot move between jobs, and those who bear it are workers who cannot move into growing sectors. A guardrail is a skills and redeployment plan agreed before any tool is rolled out. A related risk is that regional protocols become a substitute for national action while procurement continues. The third risk is copying a template from a larger country that does not fit a two-island Federation with a separate Nevis administration. Whoever signs a protocol should ask which office enforces it, with what staff, because a rule with no inspector is a notice board.

Do this week

1. Count the nine. If you are a permanent secretary, write Brantley's nine topics on one page and, beside each, name the Act, regulation or written policy that governs it in your ministry. Record your score out of nine as the baseline by 12 October 2026, then name an owner and a drafting date for at least two blanks by 19 October 2026. A blank beside a topic means you are inheriting that default.
2. Ask your three most-used AI vendors in writing where your data is processed and stored, and whether it trains their models. Log how many answer within 10 working days, by 19 October 2026. A guesthouse owner can send the same email to a booking platform and a chatbot provider.
3. Write a one-page rule listing the data that staff may never paste into a public AI tool, and share it with every employee who handles customers, patients or taxpayers, by 12 October 2026.
4. Check the status of the Data Protection Act with the Attorney General's chambers and record the reply and date by 16 October 2026.

Frequently asked questions

When did the St Kitts and Nevis Data Protection Act become law?

The National Assembly passed it on 4 May 2018 and it was published in the Official Gazette on 7 June 2018. Passing is not the same as commencement. The text says it takes effect on a day the Minister fixes by Order, and the UWI resource we used recorded no such order as of February 2025.

Which Caribbean countries have a national AI strategy?

Cullen International's 30 September 2026 report, covering 13 Caribbean countries, found two with an adopted national AI strategy: Cuba and the Dominican Republic. It found none with an AI-specific regulatory framework. The same report notes that multiple countries have named an official or body to coordinate AI work, which is a weaker step than a law.

What did CARICOM actually endorse in July 2026?

On 7 July 2026 the 126th Special Meeting of COTED on ICT endorsed the UNESCO Caribbean AI Policy Roadmap, built on consultations with more than 1,000 stakeholders. UNESCO's regional director Eric Falt said the Caribbean should help shape how AI is governed, used and directed toward the public good, and Grenada's Prime Minister Dickon Mitchell said digital transformation is no longer optional.

Was St Kitts and Nevis part of the IDB's 21 September AI meeting?

The IDB release lists The Bahamas, the Dominican Republic, Guyana and Suriname as the Caribbean governments present, with Bolivia, Brazil, Chile, Colombia, Guatemala, Panama, Paraguay and Uruguay. St Kitts and Nevis does not appear. The release does not say how invitations were chosen, so absence is not evidence of exclusion.

How many jobs could face AI-driven change in the region?

The ILO and World Bank paper of July 2024 estimates 26–38% of jobs in Latin America and the Caribbean are exposed, with 2–5% facing full automation. It also says about 17 million jobs that could gain from AI are hindered by gaps in digital access and infrastructure. The page we read does not list Caribbean countries, so how far this applies to the Caribbean is our inference, and we have no figure for St Kitts and Nevis alone.

Can a country of under 50,000 people regulate AI by itself?

World Bank data gives the Federation 46,922 people in 2025, so a standalone AI regulator is hard to staff. Brantley's answer is shared protocols agreed by Heads of Government. A cheaper first step is to adopt other countries' texts for procurement and transparency, and to put the existing data law into force.

The loose end

The weakest part of this argument is the data law. Our evidence that the Act has no start date is a February 2025 record and an absence of later notices, which is thin. If a commencement order exists, the central claim of this article shrinks and the first row of the test above changes. We also read only the public summary of the Cullen report, and the ILO page does not list Caribbean countries, so its relevance here is our inference. The IDB figures come from a report not yet published. Brantley is also making a political argument, and a CARICOM meeting may produce nothing.

Supported by StarApple AI, the Caribbean's first AI company. Adrian Dunkley, who leads StarApple AI, is the Caribbean's regional leader in AI.