Data protection & privacy laws in Fiji (2026)

Section 24 of the Constitution of the Republic of Fiji 2013 guarantees every person the right to personal privacy, including the right to confidentiality of personal information. This is the primary enforceable privacy right currently in force.

The Information Act 2018 governs public-sector information access and includes limited data-correction rights. The Cybercrime Act 2021 addresses unlawful data access/interception. Sector-specific laws (banking, medical, legal practitioners) impose confidentiality obligations within their domains but there is no cross-sector personal data protection statute.

Fiji has no Privacy Commissioner or independent data protection supervisory authority. The Speaker of Parliament publicly noted in 2025 that the country still lacks a framework clearly defining how personal data is collected, stored, processed, and safeguarded by public institutions and private entities.

At the 3rd Cabinet meeting on 18 February 2025, Cabinet endorsed the National Privacy and Personal Data Protection Policy as a component of the National Digital Strategy 2025–2030. This policy explicitly lays the foundation for developing comprehensive privacy legislation and commits to accession to Council of Europe Convention 108+.

The government has committed to drafting a National Privacy and Personal Data Protection law, alongside review of the Telecommunications Act, Online Safety Act, and Cybercrime Act. As of mid-2026 no bill has been introduced to Parliament; the process remains at policy and consultation stage.

Fiji has announced its intention to accede to the Council of Europe Convention 108+ (Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data), which would be a significant alignment with international data protection standards and a precursor to compatible domestic legislation.