In my last blog on the new Bermuda Personal Information Protection Act (PIPA), I looked at the definition of the regulation. In this follow up I want to examine some of the potential impacts of the act on businesses. If you ”use” your customer’s personal data then your contracts need to be reviewed to ensure compliance with PIPA.
Now that the Personal Information Protection Act (PIPA) has been enacted, Bermuda joins the growing number of jurisdictions with enhanced privacy protections. PIPA was passed on July 27, 2016, and will be enforced in the latter part of 2018. In this introduction to PIPA I will outline the key considerations for all businesses in Bermuda that are using personal data or personal sensitive data.