Data & Privacy · Bermuda
Data protection & privacy laws in Bermuda (2026)
Bermuda shaded by its data & privacy status
Bermuda has a comprehensive, GDPR-style data-protection regime under the Personal Information Protection Act 2016 (PIPA). PIPA received Royal Assent in 2016 and came fully into force on 1 January 2025, by which date all in-scope organisations using personal information were required to be compliant. It is enforced by an independent Privacy Commissioner.
Key points
PIPA 2016 reached full operative effect on 1 January 2025 after a staged commencement; the Government announced this date on 16 June 2023, giving organisations roughly an 18-month preparation window.
The Office of the Privacy Commissioner for Bermuda (PrivCom) is the independent regulator. The Commissioner is appointed by the Governor and exercises functions free from direction or control by any other person or authority.
Part 2 (sections 5-16) sets out the principles governing use of personal information, including fairness/lawfulness, proportionality, purpose limitation, accuracy/integrity, and limited retention.
In-scope organisations must appoint a Privacy Officer responsible for managing personal information and liaising with the Commissioner, implement safeguards, provide privacy notices, and handle individual access requests.
Individuals have rights including access to their personal information; under section 21 those who suffer damage or emotional distress may bring a private legal action and seek court-determined compensation.
PrivCom has issued the official Guide to PIPA and supporting materials explaining the principles, definitions and obligations, primarily aimed at Privacy Officers and those responsible for day-to-day data protection.
Timeline - major decisions & events
The Governor appointed Gretchen Tucker, effective 2 March 2026, as Bermuda's second Privacy Commissioner and the first Bermudian and first woman to hold the post, succeeding founding commissioner Alexander White. Signals continuity of PIPA enforcement under new leadership.
Government of Bermuda ↗Commissioner Alexander White released the finalized ~52-page Financial Services Guidance Notes after industry consultation, clarifying how PIPA applies to Bermuda's large financial-services sector. Non-binding but the authoritative reference for the sector post-implementation.
The Royal Gazette ↗The Personal Information Protection Act 2016 reached full operative effect, making all data-protection principles, individual rights, organisational obligations and the Commissioner's enforcement powers fully binding on all entities using personal information in Bermuda.
Office of the Privacy Commissioner (PrivCom) ↗PrivCom and the Government ran a public-awareness and compliance-readiness programme through 2024 to prepare organisations for full PIPA enforcement, publishing the Guide to PIPA and practical compliance checklists.
Government of Bermuda ↗The Government tabled amendments to PIPA (and related changes to the Public Access to Information Act 2010) to refine the framework ahead of full implementation, paving the way for the 2025 go-live.
Government of Bermuda ↗The Governor, after consultation with the Premier and Opposition Leader, appointed Alexander McD. White as Bermuda's inaugural Privacy Commissioner, standing up the Office of the Privacy Commissioner (PrivCom) as the country's data-protection authority.
Government of Bermuda ↗Sections of PIPA enabling appointment of the Privacy Commissioner and creation of the Office, with its duties and powers, were brought into force, beginning the staged implementation of the Act.
Office of the Privacy Commissioner (PrivCom) ↗PIPA, Bermuda's foundational data-protection statute, received Royal Assent, establishing a GDPR-aligned framework of privacy principles, individual rights, breach obligations and an independent regulator that defines the country's current regime.
Government of Bermuda ↗Bermuda - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →