Guide To Bermuda's Privacy Law

Key Takeaways

• The Personal Information Protection Act 2016 ("PIPA") came fully into force on 1 January 2025.

• All organisations in Bermuda that use personal information are expected to now be in full compliance with PIPA.

• In-scope entities need to ensure they have the requisite policies, procedures, controls and personnel in place.

The Bermuda Personal Information Protection Act is in effect as of 1 January 2025.

Introduction

PIPA came into full force on 1 January 2025. All organisations that are in scope need to be familiar with the privacy protection obligations that now apply. We summarise these below before answering the key questions regarding PIPA compliance.