Law: There is no general data protection law.

Regulator: There is no general data protection authority.

Summary: Although Anguilla has yet to enact a comprehensive data protection law, the Electronic Transactions Act 2006 (ETA) and the Confidential Relationships Act have data protection provisions, as well as setting out common remedies for the protection of privacy. In addition, several data protection provisions are stipulated in financial sector-specific legislation such as, among others, the Trust Companies and Offshore Banking Act of 2005 (the Banking Act) and the Proceed of Crime Act 2009 (PCA). Furthermore, the Banking Act prohibits all bank employees or agents from disclosing financial information without the express consent of the account holders. Moreover, the PCA established the Money Laundering Authority which delegated its daily functions and responsibilities to the Financial Services Commission (FSC), a specialized unit within the Royal Anguilla Police Force. Anguilla's FSC is also a member of the international intelligence-sharing network Egmont Group which allows financial intelligence units to communicate directly with each other for the purpose of sharing intelligence.