The Cybersecurity Act 2024 (Act)
is intended to propel the policy objectives of the Government of
Bermuda (Government) to safeguard the welfare of
economic growth and national interests into a bespoke legislative
framework for the protection of the jurisdiction's critical
national information infrastructure (CNII).
The legislation was tabled in the House of Assembly on the same
date as the Computer Misuse Act 2024 on 3 May 2024. The proposed
statute were received for debate in the wake of the September 2023
attack on the systems of the Government. This assault has been most
recently described as a “cyberattack” by the Minister
of National Security (Minister) in their 3 May 2024 Cyber Security Update. The
cyberattack caused pro-longed disruptions to various public
services in Bermuda which lasted weeks, or even months. The
Minister has confirmed that the event served to fortify a
commitment to ensure that the policies, legislation and
capabilities around cybersecurity
