The BVI Data Protection Act, 2019 does not include a number of measures typical of recent privacy laws in the Caribbean. Privacy by design and the obligation to have a DPO do not find a home in the law. The Act applies to all personal data processed by governmental entities, its scope is, otherwise, limited to private entities that process data in the context of commercial transactions. The largest fine under the Act is US$250,000.00. This is about US$50,000 less than the largest fine available under Caymans law.
Source: https://www.bartlettmorgan.com/2021/04/01/data-protection-bvi-has-entered-the-chat/