This is more than a routine public appointment as it marks the activation of a dedicated competent authority and oversight function for data protection across the BVI, with real implications for businesses, public authorities and anyone handling personal data in or from the BVI.

What does the Information Commissioner do?

In short, the Information Commissioner is responsible for making the DPA work in practice in the BVI. Key roles include:

• Enforcement and complaints handling: the Information Commissioner will monitor compliance with the DPA, receive complaints and investigate alleged breaches of data protection principles;
• Public and private sector reach: the role covers both public bodies and private organisations, reflecting the DPA’s broad application to the collection, processing, storage and sharing of personal data in the BVI;
• Advising on reform: beyond enforcement, the Information Commissioner is expected to recommend legislative, administrative and procedural improvements to strengthen the BVI’s data protection framework;
• Education and awareness: the Information Commissioner’s remit includes developing programmes to help the public better understand the privacy rights and responsibilities.

About the Information Commissioner

The Information Commissioner has, until recently, acted in senior legal and regulatory roles at the BVI International Tax Authority, supporting intergovernmental agreements, confidentiality and data protection obligations, and legislative developments aligned with the OECD’s international standards. We at Harneys are very pleased and excited about Ms Brewley’s appointment to this important function and we wish her all the very best in this new role.

Why does this matter?

The BVI Government has framed this appointment as an important step in enforcing the DPA and raising standards for the handling of personal data in the BVI. For regulated entities, public authorities and businesses in or from within the BVI, the message is clear i.e. data protection is not subject to active, dedicated oversight. Should you have any immediate concerns and in need of any legal advice or looking to implement any data protection policies and procedures into your business operations, please do feel free to get in touch with us.

For further details, the official press release can be found here.