Data Protection Act Enters Into Force In The BVI

On 9 July 2021, the Data Protection Act, 2021 (the DPA) came into force in the British Virgin Islands (the BVI). The DPA applies to all BVI companies, limited partnerships and other entities that process, have control over or authorise, the processing of, personal data anywhere in the world (such an entity, a "data controller"). It also applies to non-BVI entities that use equipment in the BVI for processing personal data otherwise than for the purposes of transit of data through the BVI.

1. Practical impact

• BVI entities that are not data controllers do not need to take any action.
• BVI entities that are data controllers need to take certain limited steps – such as preparing a privacy notice, obtaining consents and getting third party data processor confirmations.