IoM DPA 2018Data Protection Act 2018 (Isle of Man), with the Data Protection (Application of GDPR) Order 2018 and the GDPR and LED Implementing Regulations 2018The Act enables the GDPR and Law Enforcement Directive to be applied in the Isle of Man through an Application Order, with the Implementing Regulations supplying Manx-specific provisions, exemptions and enforcement powers. The result is a GDPR-equivalent regime overseen by the Information Commissioner.
- Synopsis
The Act enables the GDPR and Law Enforcement Directive to be applied in the Isle of Man through an Application Order, with the Implementing Regulations supplying Manx-specific provisions, exemptions and enforcement powers. The result is a GDPR-equivalent regime overseen by the Information Commissioner.
- Key themes
- Unique features
Applies the GDPR text by order rather than re-enacting it, with Manx modifications set in the Implementing Regulations.
- SaaS relevance
Covers SaaS providers established on the island and those targeting or monitoring individuals there.
- Extraterritorial
- Yes
- Breach notification
- Information Commissioner within 72h; individuals if high risk
- DPO
- Conditional
- Cross-border transfers
- Adequacy/standard clauses/BCRs
- Key dates
- Adopted
- In force
- Applied GDPR (as modified) and LED in Isle of Man law from 2018-08-01
- Text
- Authoritative text legislation.gov.im
- Authority
- Isle of Man Information Commissioner
- Verification
Low confidence.
Partly verified
Low confidence.Isle of Man legislation and regulator sites blocked automated access; dates and structure taken from prior knowledge and not verified this session. Maximum fine not verified. EU adequacy Decision 2004/411/EC.
- Record
- Full record for IoM DPA 2018