Bermuda’s Personal Information Protection Act 2016 (PIPA) comes fully into force today, ending an 18-month preparation period announced by the Government and the Office of the Privacy Commissioner.
Key points
- A designated privacy officer is required.
- Proportionate security safeguards must be in place.
- Breaches must be notified to the Privacy Commissioner without undue delay.
- Overseas transfers are restricted.
- Individuals gain rights of access, rectification and erasure.
UK organisations with Bermudian operations, particularly in insurance, reinsurance and financial services, should review their privacy programmes, breach procedures and overseas transfer arrangements.
Source: Full PIPA implementation date (Privacy Commissioner for Bermuda)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
