PIPA requires all organisations, in both the public and private sectors, to act reasonably in meeting their responsibilities under the Act, as well as ensure that they use personal information in a lawful and fair manner.

The lawful part is nothing new, and the obligation to act reasonably is pervasive across statutory and contractual obligations.

However, a duty to act fairly is usually associated with public sector conduct and administrative procedure, and is comparatively new legal territory for the private sector.

Pipa is flexibly structured to impose greater duties of care and protection where there is a greater risk of harm to the individual should their personal information be wrongfully used or disclosed. Therefore, organisations have a very wide ambit of discretion and judgment along that continuum of compliance.

The conduct that a duty of fairness may require for private sector organisations under PIPA has been addressed by the Privacy Commissioner, who has published helpful guidance.

The fairness principles that the Privacy Commissioner advanced includes conduct: to handle personal information in ways that individuals would reasonably expect; to not deceive or mislead individuals; that takes into account the interests of those affected by such decisions; and, in a manner that facilitates the exercise of individual privacy rights.

That guidance very closely echoes Britain’s Information Commissioner’s Office, which is that jurisdiction’s independent body mandated to uphold information rights.

Their version of Pipa — the UK General Data Protection Regulation, which is not part of Bermuda’s privacy law — contains a similar duty of fair conduct.

The Bermuda ICO’s guidance asserts that the duty of fairness also extends to treating “… individuals fairly when they seek to exercise their rights over their data. This ties in with your obligation to facilitate the exercise of individuals’ rights”.

However, as helpful as that non-binding guidance is, a duty of fair conduct in the context of Bermuda’s imminent privacy law may also go farther.

At common law, compliance with a duty of fairness also suggests that decisions affecting others should: not be undertaken with malice or in bad faith; be in accordance with a transparent process that is followed in all situations without favouritism, bias or unequal treatment; and, avoid arbitrary decisions towards those affected.

There is no question that PIPA’s imposed duty of fairness will require the private sector to carefully consider the management and administrative measures and policies that PIPA requires all users of personal information in Bermuda to formulate and adopt by January 1, 2025.

First Published in The Royal Gazette, Legally Speaking column, October 2023

Twitter LinkedIn Email Save as PDF
More Publications
30 Nov 2023

Uncertainty Over Control Test in Sanctions Relating to Russia

Bermuda-based companies undertaking business with Russian entities must comply with the island’s s...

9 Nov 2023

Navigating AI Service Contracts

Organisations are increasingly using and relying on the many commercial advantages of artificial int...

26 Oct 2023

Lay Offs: A practical analysis of the legislation for employers

The choice to make lay offs is never an easy one. It is also an area of business where the commercia...

26 Oct 2023

Bermuda: Economic Substance – Trends in Compliance and Enforcement

This article provides a brief summary of the legislative framework concerning the regulation of the ...

25 Oct 2023

The Insolvency Review: Bermuda

The Insolvency Review offers an in-depth review of the most consequential features of the insolvency...

23 Oct 2023

Bermuda: Investors still wary of sidecars despite upbeat outlook for 2023 returns

Sidecar vehicles are expected to return on average 20%-30% in 2023, assuming no major loss event in ...

5 Oct 2023

Board Governance: Caring for your Bermuda Captive

If there is one topic that always comes up in major captive conferences, it’s the best way to mana...

2 Oct 2023

Expect a Busy Year-End for Cat Bonds and Sidecars

History has shown that in both soft and hard markets, the final quarter of the year is always busy, ...

29 Sep 2023

Directors’ knowledge and the duty to creditors

In the intricate realm of corporate governance and insolvency law, directors hold a position of imme...

22 Sep 2023

Reinsurance Strategies in a Hard Market

The extent to which improved market conditions for reinsurers will endure and the importance of main...