Legislation

The Isle of Man has taken a bespoke and robust approach to the implementation of the General Data Protection Legislation (GDPR) and the Law Enforcement Directive (LED).

The implementation of the law in the Isle of Man - and its effectiveness - is essential for the Isle of Man to retain its status as an equivalent jurisdiction, allowing us to do business with jurisdictions across the EU and other countries.  In the future, the law will be developed so that the island can react swiftly to the development in data protection laws across Europe and in the Isle of Man.

Here is a simple guide to the legislative process.

The data protection legislation is as follows:

1.  Data Protection Act 2018

An Act which enables the Island to introduce EU data protection into domestic law.

2.  Data Protection (Application of GDPR) Order 2018

This Order adapts the GDPR for use as domestic legislation in the Isle of Man.

3.  Data Protection (Application of LED) Order 2018

This Order adaps the LED for use as domestic legislation in the Isle of Man.

4.  GDPR and LED Implementing Regulations 2018

These regulations implement all of the provisions of the GDPR and the LED and replace the former provisions of the Data Protection Act 2002.

5.  Data Protection (Fees) Regulations 2018

These regulations set out the fees payable for registration with the Information Commissioner.

6.     Data Protection (Withdrawal from the EU) (UK and Gibraltar) Regulations 2019