The British Virgin Islands’ Data Protection Act 2021 comes into force today, introducing the territory’s first comprehensive data protection law, passed by the House of Assembly in April.
Key points
- Sets data protection principles, including a security principle.
- Introduces breach notification duties.
- Restricts overseas transfers of personal data.
- Regulated financial services businesses remain subject to FSC requirements.
- The law is overseen by the Information Commissioner.
Many UK groups and investment structures use BVI entities. UK organisations using BVI companies, funds or service providers should review their data flows, contracts and breach procedures against the new law.
Source: Data Protection Act, 2021 (Virgin Islands Laws Online)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
