Bermuda Personal Information Protection Act 2016
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | BM PIPA |
| Region | Americas |
| Country or scope | Bermuda |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers BM PIPA
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
BM-PIPA-13 Security Safeguards | Organisations must protect personal information with safeguards proportional to its sensitivity and the likely harm, including integrity protection of the systems holding it (PIPA 2016 s.13) | Scan |
BM-PIPA-14 Breach of Security Notification Readiness | Breaches of security likely to cause harm must be notified to the Privacy Commissioner and affected individuals, which requires identifying exactly which system components were affected (PIPA 2016 s.14) | Scan |
BM-PIPA-RESP Organisational Responsibility | An organisation is responsible for the personal information in its custody and must designate a privacy officer, presupposing an inventory of the systems that use it (PIPA 2016, responsibility/privacy-officer provisions) | Scan |
BM-PIPA-TP Third-Party and Overseas Processing | Using third parties or overseas transfers to process personal information requires comparable protection, so processing-component suppliers must be identified (PIPA 2016, third-party/overseas transfer provisions) | Scan |
BM-PIPA-INTG Integrity of Personal Information | Personal information must be accurate and kept up to date as far as necessary for its purpose, requiring version tracking of the software maintaining it (PIPA 2016, integrity/accuracy provision) | Scan |
BM-PIPA-DOC Privacy Notice and Documentation | Organisations must maintain clear, accessible documentation of their information practices, met by an identifiable, timestamped record of the processing environment (PIPA 2016, privacy-notice duty) | Scan |
Policy templates
All 22 from the standard set, adapted to BM PIPA.
Belize Data Protection Act 2021
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Bolivia Supreme Decree 1793
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.