In August 2023 Guyana became the latest and almost the last Caribbean country to enact a data privacy law, other than Haiti (a failed state) and some minor UK territories.(1) With 20/24 (80%) of its jurisdictions having data privacy laws, the first impression of the Caribbean is of an active region for data privacy. The appointment of data protection authorities (DPAs) supports this first impression. This article examines how strong are the data privacy principles embodied in these laws, by international standards, and whether their quality is improving over time. It is a comparison of “the law on the books”.