Internet & Online Safety - Bermuda

Bermuda has not enacted a dedicated online-safety or content-moderation regime equivalent to the EU DSA or UK Online Safety Act; there is no online-safety regulator, no statutory platform 'duty of care', and no general intermediary-liability framework for user-generated content.

The Electronic Communications Act 2011 provides protections against harassment carried out over telecommunications lines (commonly described as covering cyberbullying); the Act otherwise regulates electronic voice/data/audio-visual communications services overseen by the Regulatory Authority.

The Criminal Code contains offences protecting children from online predators and abuse, forming the principal statutory basis for combating online child sexual exploitation in Bermuda.

The Personal Information Protection Act 2016, a GDPR-influenced regime, had its principal provisions come into force on 1 January 2025 and governs how organisations (including online services) process personal data, with the Privacy Commissioner as enforcer and penalties up to US$25,000 or two years' imprisonment.

The Cybersecurity Act 2024 (passed 31 May 2024, assented 24 June 2024) protects 'critical national information infrastructure' and establishes a Cybersecurity Advisory Board and National Cybersecurity Unit; the Computer Misuse Act 2024 (passed 17 May 2024) criminalises unauthorised computer access. These target cybercrime/security, not online content moderation.

There is no statutory social-media age-verification or age-assurance regime in Bermuda; the government has indicated further amendments to the Electronic Communications Act and Criminal Code to strengthen cybercrime investigation and prosecution, but no comprehensive online-safety bill has been identified.