{
  "node_id": "vg-pdpa-2021",
  "title": "British Virgin Islands Data Protection Act 2021",
  "domain": "Data Protection & Privacy",
  "version": "1.1.0",
  "last_updated": "2026-06-29",
  "bluf": "The British Virgin Islands enacted the Data Protection Act, 2021 (No. 3 of 2021), a comprehensive statute aligned with UK and EU data protection standards. Administered by the BVI Information Commissioner, the Act establishes data protection principles, mandates lawful bases for processing, and grants data subjects rights of access, rectification, restriction, erasure, portability, and objection. Controllers must implement data protection by design and by default, conduct Data Protection Impact Assessments for high-risk processing, appoint a Data Protection Officer where required, and report personal data breaches. Cross-border transfers require adequate protection or appropriate safeguards.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/vg-pdpa-2021.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}