Bermuda's New Privacy Legislation: Are You Prepared?

 Bermuda has introduced the Personal Information Protection Act, 2016 ("PIPA") to regulate the use of personal information by organisations in a manner that recognises both the need to protect the rights of individuals in relation to their personal information and the need for organisations to use personal information for legitimate purposes. The Act will come into full force in the latter part of 2018. It will affect every individual and every organisation in Bermuda, including Government and non-profits. Organisations are advised to review their internal governance procedures to ensure compliance with their new statutory obligations.

What is PIPA?

PIPA sets out how organisations, businesses and the Bermuda Government may use personal information. The Act has drawn on legislation from a number of jurisdictions including Canada, the United States and Europe. It reflects a set of internationally accepted privacy principles and good business practices for the use of