Bermuda AI Regulation and Law: The 2026 Guide

Bermuda has no standalone AI law. As of November 2026, artificial intelligence in Bermuda is regulated through existing law and sector rules: the Bermuda Monetary Authority's proposed AI Guidance Note for financial services, the Personal Information Protection Act 2016 (PIPA) wherever personal data is involved, the Government's own AI Policy, and general law on employment, contracts and liability. This guide from Laurenceo, Bermuda's AI governance think tank, sets out every layer, what each one requires, and what is coming next.

The Short Answer

Is there an AI Act in Bermuda? No. There is no Bermuda equivalent of the EU AI Act, and no bill has been tabled.
Who regulates AI in Bermuda? No single body. The Bermuda Monetary Authority (BMA) covers regulated financial services, the Privacy Commissioner covers personal data under PIPA, and the Government's AI Policy covers public-sector use.
What is the most important AI rule in Bermuda right now? For financial firms, the BMA's proposed Guidance Note on the Responsible Use of AI, whose consultation closed on 30 October 2026. For everyone else, PIPA.
Is more coming? Yes. The BMA is finalising its guidance, Bermuda's judiciary has a committee working on a practice direction for AI in court, and the Premier has said the Government intends to explore legal clarity for AI agents in financial services.

The Five Layers of AI Regulation in Bermuda

Layer	Who	Applies to	Status (November 2026)
Financial services AI guidance	Bermuda Monetary Authority	Every BMA-regulated entity: insurers, reinsurers, banks, investment firms, digital asset businesses, trust and corporate service providers	Proposed Guidance Note; consultation closed 30 October 2026
Data protection	Office of the Privacy Commissioner (PrivCom)	Any organisation using personal information in Bermuda, including in AI systems	PIPA fully in force since 1 January 2025
Public-sector AI	Government of Bermuda	Government employees and consultants using AI for official work	AI Policy published 2025
Courts and litigation	Judiciary of Bermuda	Lawyers and litigants using AI in proceedings	No AI rules yet; practice direction committee announced
General law	Courts, Department of Labour, Human Rights Commission	Employers, businesses and contracts	Existing law applies to AI outcomes

Financial Services: The BMA's AI Guidance Note

The BMA has moved further on AI than any other Bermuda authority. It published a discussion paper on the responsible use of AI in July 2025, a stakeholder letter in February 2026, and on 14 August 2026 a consultation paper proposing a Guidance Note.

The design choice matters: the BMA is not creating an AI licence or a pre-approval regime. As Walkers summarised it, the proposal applies to all BMA-regulated entities and explains how existing governance, risk management, conduct, cyber, outsourcing and AML obligations apply when AI is used. The board keeps overall accountability for AI risk, each AI use case is assessed for materiality, and agentic AI that can take actions with limited human intervention gets detailed expectations.

The guidance rests on eight principles (technology neutrality, accountability, proportionality, integration with current frameworks, robust lifecycle management, responsible and ethical data use, explainability and transparency, and adaptability) and five outcomes, the last of which is adequate evidence for supervisory review. Laurenceo's full explainer is The BMA's AI Guidance Note, Explained, and its public consultation response sets out how firms can produce that evidence by default.

Privacy: PIPA Applies to Every AI System That Uses Personal Data

The Personal Information Protection Act 2016 came fully into force on 1 January 2025. It does not mention AI by name, and it does not need to: training a model on customer records, running a chatbot that takes personal details, or using AI to screen job applicants are all uses of personal information.

That brings the full PIPA framework into play: a lawful condition for each use, privacy notices, proportionality, accuracy, security safeguards, care with overseas transfers, individual rights, a designated privacy officer and breach notification. Organisations face fines of up to $250,000 on conviction, according to DLA Piper's PIPA summary. Laurenceo's practical guide is PIPA and AI.

Government Use: The AI Policy and Human Oversight

The Government of Bermuda's Artificial Intelligence Policy, presented to the House of Assembly by Minister Diallo Rabain on 28 March 2025, governs how government employees and consultants use AI. It requires compliance with PIPA and PATI and a human-in-the-loop approach, so AI decisions that affect people's rights or government services are reviewed by a person. In May 2026 the Government announced a partnership with NEAR AI to deploy AI across public services. See How the Government of Bermuda Uses AI.

Courts, Lawyers and Employers

Bermuda has no court rules specific to AI. Appleby reports that the judiciary's 2025 annual report announced a committee, led by Mrs Justice Subair Williams, to work on a practice direction. Meanwhile the Supreme Court of Bermuda's 2025 decision in Fourworld v Enstar has been described by Burges Salmon as one of the first common law endorsements of generative AI in e-discovery.

For employers, Bermuda has no employment-specific AI regime comparable to the EU AI Act, so existing employment, human rights and privacy law governs AI hiring, monitoring and dismissal decisions (Appleby). Laurenceo covers both in AI and the Law in Bermuda.

Digital Assets and AI Agents

Bermuda's digital asset regime, the Digital Asset Business Act 2018 and the Digital Asset Issuance Act 2020, does not prohibit AI. Carey Olsen notes that Bermuda-regulated digital asset businesses are not restricted from using AI models, and that existing businesses already do. At NearCon in 2026, Premier David Burt said the Government intends to explore adding legal clarity around the use of AI agents in financial services. No bill has been published.

How Bermuda Compares

Jurisdiction	Approach to AI	Dedicated AI law?
Bermuda	Sector guidance (BMA) plus PIPA; principles-based, no new licence	No
Cayman Islands	No AI-specific rules yet; a legislative framework reportedly targeted for mid-2027 (Harneys)	Not yet
European Union	The EU AI Act: risk tiers, prohibited practices and obligations for high-risk systems	Yes
United Kingdom	Regulator-led, principles-based, through existing regulators	No

Bermuda's position is distinctive: among offshore financial centres, it has the most developed financial-sector AI guidance, while keeping a principles-based approach that suits its insurance and reinsurance market. Bermuda firms with EU customers or EU operations may still need to meet the EU AI Act directly.

What Happens Next

The BMA reviews consultation feedback and issues its final Guidance Note. It has not announced a date.
The judiciary's committee completes a practice direction on AI in court proceedings.
The Government decides whether to pursue legal clarity for AI agents in financial services.
The Privacy Commissioner may issue AI-specific guidance under PIPA; none has been published yet.

Laurenceo records every development on the Bermuda AI Tracker, and Laurenceo Intelligence covers Bermuda AI news daily.

Laurenceo's View

Bermuda's principles-based route is the right one for a market built on insurance, reinsurance and international business. The hard part is not agreeing with principles; it is proving, on any given day, that AI controls work. That is why Laurenceo argues for evidence by default, and why it built free tools to help: the AI Governance Readiness Assessment, the AI Policy Gap Analyzer and the AI Governance Evidence Toolkit.

Questions and Answers

Is AI legal in Bermuda?

Yes. Using AI is legal in Bermuda. There is no ban or licence for AI as such; the law regulates how AI is used, chiefly through PIPA for personal data and the BMA's guidance for regulated financial firms.

Does Bermuda have an AI law?

No. Bermuda has no standalone AI law or AI Act. AI is governed through existing law and sector rules, and no AI bill has been tabled as of November 2026.

Who regulates AI in Bermuda?

No single regulator. The Bermuda Monetary Authority sets expectations for AI in regulated financial services, the Privacy Commissioner enforces PIPA where AI uses personal information, and the Government's AI Policy covers public-sector use.

Does the EU AI Act apply in Bermuda?

Not as Bermuda law. But a Bermuda company that places AI systems on the EU market, or whose AI outputs are used in the EU, can fall within the EU AI Act's scope, so Bermuda firms with EU business should check.

When will the BMA's AI guidance be final?

The consultation closed on 30 October 2026. The BMA has not announced when the final Guidance Note will be issued. Laurenceo will record it on the Bermuda AI Tracker the day it is published.

Where can I get independent analysis of Bermuda AI regulation?

Laurenceo, Bermuda's AI governance think tank, publishes free research, a public BMA consultation response, daily Bermuda AI news through Laurenceo Intelligence and free governance tools.

Bermuda AI Regulation and Law