The Royal Gazette published an article on August 26th, 2020 about Changing Bermuda’s data privacy protection mindset.
The recent enactment of the European Union’s General Data Protection Regulation (GDPR) and Bermuda’s Personal Information Protection Act (PIPA) added to the privacy regulatory regime, affecting all individuals, businesses, non-profit, charities, and governments.
Key points:
- PIPA was first introduced in 2016 along with the recent appointment of Alexander White as the privacy commissioner in January 2020. Media releases have continued to report the enforcement of PIPA as it was coming forth while relevant parties were alerted about compliance. The financial and business community is preparing for data privacy compliance as they have complied with the Anti-Money Laundering (AML) and Anti-Terrorist Financing (ATF) legislation and cyber policies.
- The risks of Cybersecurity and Privacy incidents cause exposure of data which could lead to more serious incidents where personal and/or private data is stolen or leaked as happened with the Paradise Papers. This not only affects business staff but customers and third parties as well.
- Senior Staff and business owners of local companies in Bermuda will need to ensure their staff and colleagues embrace data privacy and security as they did with the AML/ATF.
- Privacy officers can create a culture of data privacy toward PIPA compliance by studying, what constitutes private and personal data, discussing the consequences of non-compliance, identifying potential violations, training employees, business owners, vendors and continually monitoring compliance.
Reference: royalgazette.com
Contributed by: Jason Jacobs from Guyana. Jason is a member of the CCST Discord group from the G5 Cyber Security Foundation Ltd. Learn more about CCST (Caribbean Cyber Support Team) by visiting caribbeancst.org. CCST is a collaborative group on the Discord platform for Caribbean people in IT, from beginners to experts.