Antigua and Barbuda regulates marketing email through its privacy law rather than through an anti-spam act. If your business sends newsletters from St. John’s, English Harbour or Codrington, the rules you need to know sit in the Data Protection Act, 2013, supported by the disclosure duties in the Electronic Transactions Act, 2006. And because so many Antiguan businesses market to visitors, the laws of your guests’ home countries often matter just as much.
This guide is general information, not legal advice. Check specific questions with a local attorney.
Is there an anti-spam law in Antigua and Barbuda?
Not a dedicated one. There is no Antiguan equivalent of the US CAN-SPAM Act or Canada’s CASL, with their specific rules on subject lines, opt-out deadlines and dedicated penalty regimes. The Electronic Transactions Act lets service providers adopt codes of practice that deal with customers sending bulk unsolicited messages, and section 42 requires online sellers to identify themselves clearly. The real compliance weight, however, comes from data protection. For a detailed answer, see are email campaigns legal in Antigua and Barbuda?
The Data Protection Act, 2013 in brief
The Act applies to public and private bodies that process personal data, and an email address tied to a person is personal data. Its principles are the backbone of lawful email marketing:
| Principle | What it means for your mailing list |
|---|---|
| General principle (s. 5) | Process personal data only with consent, unless an exception such as performing a contract applies. |
| Notice and choice (s. 6) | Tell subscribers why you collect their data, who may receive it and how to contact you. |
| Disclosure (s. 7) | Do not pass the list to other parties for new purposes without consent. |
| Security (s. 8) | Protect the data, consider where it is stored, and require guarantees from processors. |
| Retention (s. 9) | Delete data you no longer need. |
| Integrity and access (ss. 10 and 11) | Keep records accurate and let people see and correct them. |
Enforcement belongs to the Information Commissioner, and breaches can be prosecuted as criminal offences, with fines for companies of up to $500,000 on indictment under section 23.
Your list is international, so your compliance should be too
Antigua and Barbuda’s economy leans heavily on tourism, yachting, the Citizenship by Investment Programme and international financial services. All four sectors send email to people who live elsewhere: guests from the United States, Canada and the United Kingdom, crews and owners arriving for Antigua Sailing Week, investors applying through licensed agents, and clients of offshore institutions. That means you may also need to respect:
- the GDPR for residents of the European Union, and UK GDPR plus the UK’s electronic marketing rules for UK residents;
- CAN-SPAM for commercial email to US recipients;
- CASL for Canadian recipients, where express or implied consent is required. Mailpro explains it in its guide to Canadian email law.
The strictest of these, the GDPR and CASL, require consent. If you design your process around explicit opt-in, you meet the Antiguan standard and most foreign ones in one step.
A compliance checklist for Antiguan senders
- Use an opt-in checkbox that is not pre-ticked, plus a short privacy notice at the point of sign-up.
- Confirm new subscribers by double opt-in and keep the timestamp.
- Show your business name, a physical address and a contact method in every email.
- Offer a clear unsubscribe link and a List-Unsubscribe header.
- Separate transactional messages, such as booking confirmations, from promotional ones.
- Never import purchased lists; see why in never buy email lists.
The step-by-step version is on our page about getting permission to send email campaigns.
When a subscriber asks what you hold
Under sections 11 to 16 of the Act, people can ask to see the personal data you hold about them and have inaccurate data corrected. For a marketing list, that usually means their contact details, the date and source of their sign-up, their preferences and their campaign history. Keep these in one system rather than across spreadsheets and inboxes, so you can answer quickly and completely. If someone asks you to stop emailing them, remove them from promotional sends straight away, even if they signed up only last week.
Complaints and the Information Commissioner
Complaints about how personal data is handled can be taken to the Information Commissioner, and the Commissioner’s decisions can be appealed to the court. For most businesses the practical lesson is simple: a clear consent record, an easy unsubscribe and a prompt response to requests prevent most complaints before they start.
Data location and your platform
Section 8 asks data users to consider where personal data is stored and to secure its transfer. The Act has no separate cross-border transfer regime, but when you hand your list to a service provider you remain responsible for it. Mailpro, run by Maxony in Geneva since 2001, hosts data on private Swiss infrastructure outside US jurisdiction, encrypts connections with TLS 1.3 and never sells or rents customer data. Switzerland has an EU adequacy decision, which also simplifies mailing European guests. Learn more about Swiss hosting.