Data Protection Act 2002

The Isle of Man has had data protection legislation since 1986. The Data Protection Act 1986 was based upon the UK Data Protection Act 1984 and gave effect to the Council of Europe Convention 108. At the Island's request, this convention was extended to the Island on the 21st January 1993. The Additional Protocol to the Convention (Treaty 181) regarding supervisory authorities and transborder data flows was extended to the Island on 8 November 2001.

On the 1st April 2003, the Data Protection Act 2002 came into operation and replaced and repealed the Data Protection Act 1986.

The Act is based upon the UK’s Data Protection Act 1998 and gives effect in the Island to Directive 95/46/EC of the European Parliament and of the Council of 24th October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. On the 28th April 2004, the European Commission formally recognised that the Isle of Man has adequate (in terms of the directive) data protection legislation.

The EU Directive and Convention 108 are being reformed. Further information about the reforms can be found in the "EU developments" section.