LexLint

Know the law where your app runs.

Law / Bermuda

Personal Information Protection Act 2016, breach of security notification

Personal Information Protection Act 2016 (Bermuda), 2016:43, s. 14 (breach of security)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force.

A breach notification rule binding public and private bodies.

As of 7 September 2026.

What it requires

  • Notify the Privacy Commissioner, then any affected individual, without undue delay of a breach of security that is likely to adversely affect an individual.
  • Describe in the Commissioner notification the nature of the breach, its likely consequences, and the measures taken and to be taken to address it.

If you get it wrong

Criminal exposureYes

Criminal exposure note

Failing to notify a breach of security to the Commissioner in accordance with section 14 is an offence under section 48, liable on summary conviction, in the case of an individual, to a fine not exceeding $25,000 or imprisonment not exceeding two years or both, and on conviction on indictment, in the case of a person other than an individual, to a fine not exceeding $250,000.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Where a breach of security leads to the loss, unlawful destruction, or unauthorised disclosure of or access to personal information that is likely to adversely affect an individual, the responsible organisation must, without undue delay, notify the Privacy Commissioner of the breach and then notify any individual affected.

The notification to the Commissioner must describe the nature of the breach, its likely consequences for the individual, and the measures taken and to be taken to address it, so the Commissioner can decide whether to order further steps and can maintain a record of the breach.

When LexLint raises it

  • crawls_web
  • trains_models
  • deploys_chatbot

Read the law

Personal Information Protection Act 2016, Consolidated Laws of Bermuda

Back to the example  ·  Lint your app