Artificial Intelligence · Gibraltar
AI regulation in Gibraltar (2026)
Gibraltar shaded by its artificial intelligence status
As of mid-2026 Gibraltar has no dedicated AI law and no AI bill before Parliament. The Government has signalled an intention to regulate AI and launched a wide consultation — particularly around AI in public services — while existing data-protection and principles-based financial-services frameworks apply to AI in the meantime. Government engagement (ministerial statements, the AI Futures & Foresight Conference, and major data-centre investment) is active but has not yet produced a binding AI-specific instrument.
Key points
The Government plans a 'wide consultation' on whether and how to regulate AI, with the Chief Minister noting AI's broad implications require extensive input, especially regarding AI in the delivery of public services. No AI-specific bill has been tabled.
Since 1 January 2021, Gibraltar's data-protection regime is the Gibraltar GDPR plus the Data Protection Act 2004, enforced by the Gibraltar Regulatory Authority acting as Information Commissioner. These rules govern personal-data processing within AI systems absent any AI-specific statute.
The Gibraltar Financial Services Commission (fsc.gi) regulates on a principles-based model, allowing firms to adopt new technologies within the existing framework rather than under prescriptive AI rules. (Note: a January 2026 'Use of Artificial Intelligence' policy statement circulating online is from the Guernsey FSC (gfsc.gg, 'Bailiwick'), not Gibraltar.)
The Government hosted an AI Futures & Foresight Conference (Jan 2026) gathering ~50 senior leaders across finance, gaming, insurance, law, tech and government, with Minister Nigel Feetham urging Gibraltar to take a responsible lead on AI adoption.
Gibraltar's AI posture currently emphasises capacity-building — including a £1.8bn Pelagos data-centre project for high-density/AI computing — described as the territory's most significant infrastructure investment since the early 1990s. This is economic strategy rather than a regulatory instrument.
As a British Overseas Territory with its own parliament and regulatory autonomy, Gibraltar tends to track UK legislative approaches; the UK has no comprehensive AI Act, favouring a sector-led, principles-based model, which informs Gibraltar's likely direction.
Timeline - major decisions & events
HM Government of Gibraltar and Numero Partners convened C-suite leaders from finance, gaming, insurance, DLT, telecoms and law; Minister Feetham framed the goal as taking a responsible lead in AI adoption and concluded the issue is an 'alignment opportunity' between government, regulators and industry. Signals the current policy direction ahead of any AI-specific legislation.
HM Government of Gibraltar ↗The Ministry of Justice, Trade and Industry announced the invitation-only AI Futures & Foresight Conference as part of a programme on innovation, skills and 'smart regulation' to broaden Gibraltar's economic base. Marked AI moving onto the formal government agenda.
HM Government of Gibraltar ↗Chief Minister Fabian Picardo indicated the government would consult widely on whether and how to regulate AI, citing broad implications for the delivery of public services. This is the origin point of Gibraltar's deliberation over a dedicated AI regime, which as of 2026 has not yet produced legislation.
Gibraltar Chronicle ↗Gibraltar introduced regulations setting market-integrity standards for DLT/virtual-asset firms (press release 299/2022), targeting market manipulation and abuse. Reinforced the principles-based DLT regime within which AI-driven trading and analytics tools must operate.
HM Government of Gibraltar ↗Government, GFSC and industry formed a working group to operationalise the new market-integrity principle for DLT providers. Established the supervisory expectations around fair trading, surveillance and disclosure that constrain automated/AI trading systems.
HM Government of Gibraltar ↗On leaving the EU transition period, Gibraltar adopted the 'Gibraltar GDPR' alongside the Data Protection Act 2004, with the Gibraltar Regulatory Authority as Information Commissioner. It carries the right not to be subject to solely automated decisions/profiling — currently the most concrete legal control on AI affecting individuals.
Gibraltar Regulatory Authority ↗Following consultation with the GFSC, GANT and licensees, Gibraltar updated the DLT Providers Regulations to add a tenth regulatory principle requiring firms to maintain market integrity (press release 631/2020). Extended the outcomes-based regime that governs technology-driven financial firms.
HM Government of Gibraltar ↗Gibraltar's principles-based Distributed Ledger Technology framework — billed as the world's first purpose-built blockchain regulatory regime — took effect, requiring DLT firms to be licensed by the GFSC. Its outcomes-focused, technology-neutral principles are the regime within which AI tools in financial services are currently supervised, absent a dedicated AI law.
Gibraltar Financial Services Commission ↗Gibraltar's foundational data-protection statute established the legal architecture for processing personal data 'by automated means or not' and the supervisory authority later designated as the Gibraltar Regulatory Authority. It underpins all subsequent automated-processing and profiling controls relevant to AI.
Gibraltar Regulatory Authority ↗Gibraltar - other topics
Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →