Online safety & content laws in British Virgin Islands (2026)

The Computer Misuse and Cybercrime Act 2014, as amended in 2019, criminalises unauthorised computer access and introduced specific online offences: electronic defamation (up to 3 years imprisonment / $100,000 fine) and sending 'grossly offensive or menacing' messages via computer (up to 14 years / $500,000 fine). The broad scope of the messaging offence drew criticism from the Committee to Protect Journalists as a press-freedom risk.

The Data Protection Act 2021 (in force from 9 July 2021) is the BVI's first comprehensive data-protection statute, modelled on EU GDPR principles. It requires data controllers to ensure security of personal data against unauthorised access or disclosure, but does not itself create content-moderation or platform-safety obligations.

The Telecommunications Act 2006 established the Telecommunications Regulatory Commission (TRC) as the independent sector regulator with licensing and compliance powers over internet service providers and telecoms operators. The TRC does not have an online-safety or content-moderation mandate.

The Electronic Transactions Act 2019 provides a legal framework for electronic commerce and e-government, recognising electronic signatures and records. It facilitates digital business but does not impose safety or content duties on platforms.

As of May 2026, the BVI has no dedicated online platform liability rules, no statutory duty-of-care obligations for platforms hosting user content, and no age-verification mandates for online services. No such legislation has been publicly proposed or introduced in the House of Assembly.

Section 18 of the BVI Constitution (2007) protects freedom of expression and of the press. This constitutional guarantee provides a baseline against which the online speech offences in the 2019 cybercrime amendment have been assessed critically by press-freedom organisations.