Isle of Man. Comprehensive data protection. Act + implementing order/regulations
IoM DPA 2018Data Protection Act 2018 (Isle of Man), with the Data Protection (Application of GDPR) Order 2018 and the GDPR and LED Implementing Regulations 2018
Partly verified
Low confidence.Isle of Man legislation and regulator sites blocked automated access; dates and structure taken from prior knowledge and not verified this session. Maximum fine not verified. EU adequacy Decision 2004/411/EC.
§1Summary
- Synopsis
The Act enables the GDPR and Law Enforcement Directive to be applied in the Isle of Man through an Application Order, with the Implementing Regulations supplying Manx-specific provisions, exemptions and enforcement powers. The result is a GDPR-equivalent regime overseen by the Information Commissioner.
- Key themes
- Unique features
Applies the GDPR text by order rather than re-enacting it, with Manx modifications set in the Implementing Regulations.
- SaaS relevance
Covers SaaS providers established on the island and those targeting or monitoring individuals there.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Information Commissioner within 72h; individuals if high risk
- DPO
- Conditional
- Cross-border transfers
- Adequacy/standard clauses/BCRs
§3Dates
- Key dates
- Adopted
- In force
- Applied GDPR (as modified) and LED in Isle of Man law from 2018-08-01
§4Text and authority
- Text
- Authoritative text legislation.gov.im
- Authority
- Isle of Man Information Commissioner
§5Where it applies
- Domestic law of
- Isle of Man
§6Sources and verification
- Verification
Low confidence.
Partly verified
Low confidence.Isle of Man legislation and regulator sites blocked automated access; dates and structure taken from prior knowledge and not verified this session. Maximum fine not verified. EU adequacy Decision 2004/411/EC.