Bermuda: data protection and AI governance
Personal Information Protection Act (PIPA 2016), in force since 2019-01-01. Supervisory authority: Privacy Commissioner.
Other languagesFrançaisEspañolالعربية中文
Data protection
- Instrument
- Personal Information Protection Act (PIPA 2016)
- In force since
- 2019-01-01
- Authority
- Privacy Commissioner
- Penalties
- Jusqu'à 250 000 BMD
- Key obligations
- Consentement
- Sécurité
- Notification
- Source
- http://bermudalaws.bm/
Key obligations and penalties are quoted from the record as the source states them; they are not translated.
What the engine decides here
Indicative coverage
This jurisdiction's legal attributes are not modelled yet: no decision is staked on it. The engine flags the uncertainty in its response rather than assuming a permissive regime. Not knowing is an answer; guessing is not.
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders, from the same function the API calls.
- Allow
Read an internal contract
Low-risk operation
- Allow
Send a customer record to US_FED
Low-risk operation
- Deny
Decide on a job application
Decision reserved for a human
Advisory decisions. StructureClerk decides; your infrastructure enforces.
Do your agents operate in Bermuda?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.