Artificial Intelligence - Bermuda

Bermuda's Government adopted an AI Policy applying to all government employees and consultants using AI for official purposes, built on ethics, accountability, transparency and equity, with a phased pilot-based rollout. It is an internal governance instrument, not legislation binding the private sector.

The policy requires a human to review AI decisions that affect people's rights or government services, and mandates that AI systems be explainable and auditable, with regular risk assessments and audits to mitigate bias.

AI use must comply with Bermuda's Personal Information Protection Act (PIPA) for privacy/data protection and the Public Access to Information Act (PATI); there is no separate AI statute, so existing laws govern data and transparency aspects.

The Bermuda Monetary Authority published a discussion paper, 'The Responsible Use of Artificial Intelligence in Bermuda's Financial Services Sector,' on 30 July 2025, proposing an outcomes-based risk-management approach with board-level accountability and AI inventory/risk assessment across five dimensions (impact severity, autonomy/human oversight, complexity/explainability, data sensitivity, deployment context).

Feedback closed 30 September 2025; a stakeholder letter in February 2026 confirmed a principles-led approach and that respondents favoured embedding AI governance in existing regulation rather than stand-alone AI rules. The BMA is issuing further consultation in 2026 with a final proposal targeted for Q3 2026.

Bermuda has not enacted an EU AI Act-style comprehensive law, nor binding sectoral AI obligations yet; the in-force position is voluntary/internal guidelines plus existing data and information laws, with financial-sector measures still at the consultation stage.