Bermuda Data Protection Overview August 2024 edition
Governing Texts
As of the date of this publication (1 August 2024), data
protection in Bermuda is largely comprised of a complex set of
sectoral laws, regulator guidance, and common law precedents
established by the Bermuda courts.
The administrative provisions of the Personal Information
Protection Act 2016 ('PIPA'), however, have been in force
since 2 December 2016 and the corresponding independent regulatory
authority, the Office of the Privacy Commissioner for Bermuda
('PrivCom'), has an established presence on the island.
On 15 June 2023, the Government of Bermuda ('the
Government') and PrivCom jointly announced the official date
for the remaining provisions of PIPA to come into effect as 1
January 2025. This was intended to provide organisations in Bermuda
with an 18-month window to prepare for compliance with PIPA.
