Bidda Sovereign Intelligence · 10,085 Verified Nodes · 39 Sovereign Pillars

Maldives Data Protection: Data Protection Act 2017 (in force) and the draft Privacy and Personal Data Protection Bill (pending)

The Maldives has not enacted a comprehensive 'Personal Data Protection Act 2021'. The only enacted instrument is the limited Data Protection Act 2017 (in…

What Maldives Data Protection: Data Protection Act 2017 (in force) and the draft Privacy and Personal Data Protection Bill (pending) requires

The Maldives has not enacted a comprehensive 'Personal Data Protection Act 2021'. The only enacted instrument is the limited Data Protection Act 2017 (in force since 15 January 2018), which sets out basic principles for the collection, use, and disclosure of personal data. A comprehensive, GDPR-style Privacy and Personal Data Protection Bill was released for public consultation in May 2023 and remains a draft pending before the People's Majlis (Parliament); it has not been enacted as of 2026. The draft Bill proposes lawful, fair, and transparent processing with consent, data subject rights of access, correction, erasure, and objection, mandatory breach notification, and the establishment of a dedicated independent Data Protection Authority (DPA) as the supervisory body. The Communications Authority of Maldives (CAM) is the ICT/communications regulator and is not the designated data protection authority. Organisations operating in the Maldives should comply with the Data Protection Act 2017 today and prepare for the obligations proposed by the draft Bill, treating the Bill's provisions as forthcoming rather than binding until enacted.

Pillar: Data Protection & Privacy · Authority: People's Majlis (Parliament) of the Maldives; Attorney General's Office of the Maldives; Ministry of Economic Development (draft Bill sponsor) · Version: 2.0.0 · Last updated:

Primary source: https://www.trade.gov.mv/news/privacy-and-personal-data-protection-bill-translation

SHA-256 integrity: 08f1923d3763c93e3ed794bba817af0bb0423b5c97936840dc30c703efef71a6

Primary Citations — 5 traced to source

  • Data Protection Act 2017 (Maldives), enacted; in force from 15 January 2018
  • Draft Privacy and Personal Data Protection Bill (Maldives), released for public consultation May 2023, pending before the People's Majlis - English translation published by the Ministry of Economic Development (trade.gov.mv)

+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.