Law: Data Protection Act, 2021

Regulator: Office of the Information Commissioner, not yet established.

Summary: The British Virgin Islands ('BVI') is a British overseas territory. However, the EU's General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') is not directly applicable in the BVI. The BVI enacted the Data Protection Act, 2021 on 13 April 2021 in the Official Gazette, which will regulate various data protection matters and provide for the establishment of the Office of the Information Commissioner.

The BVI is, though, bound by English Common Law as well as by the UK's Sanctions and Anti-Money Laundering Act of 2018, which provides that the beneficial ownership of companies in British Overseas Territories must be publicly registered for disclosure by 31 December 2020. Moreover, the BVI is an Associate Member of the Caribbean Community ('CARICOM') which seeks to provide for greater integration within the Caribbean. In addition, there are several relevant requirements in the financial sector.