Data protection & privacy laws in Tuvalu (2026)

UNCTAD's eTrade readiness assessment of Tuvalu confirmed 'no legal framework currently exists for electronic transactions, data protection and online consumer protection in Tuvalu.' DataGuidance and the official Tuvalu legislation portal corroborate this absence.

Tuvalu has no designated data protection authority or regulatory body charged with overseeing personal data processing. Claims in some third-party sites of a 'Tuvalu Data Protection Authority' are unsubstantiated by any official primary source.

Tuvalu's Department of ICT published its National ICT Policy in 2024, which acknowledges the absence of data protection laws and sets development of such legislation as a future objective. This is an aspirational policy document, not a formal legislative proposal.

The Constitution of Tuvalu (revised 2023) contains general human rights provisions, but no specific data protection rights or framework equivalent to a modern privacy regime. It does not establish enforceable data subject rights.

Since COP27 (2022) Tuvalu has pursued a 'digital nation' strategy including blockchain-based digital ID, but SEAP found the country 'lacks dedicated data protection legislation to safeguard personal information' in that system.

UNCTAD's Global Cyberlaw Tracker, which monitors data protection legislation across 195 countries, does not record an enacted data protection or privacy law for Tuvalu as of the latest available data.