Fiji: technology regulation at a glance

Framework: Reserve Bank of Fiji Act 1983, Section 22(2), as amended by the Reserve Bank of Fiji Budget Amendment Act 2025; administered by the Reserve Bank of Fiji (RBF) and the National Anti-Money Laundering Council (NAMLC)

Fiji enacted a comprehensive ban on all virtual asset services effective 30 August 2025, via Section 22(2) of the Reserve Bank of Fiji Act 1983 as amended by the Budget Amendment Act 2025. Any natural or legal person, whether based in Fiji or overseas, is prohibited from operating exchanges, facilitating transfers, offering custody, or marketing virtual assets to Fijian residents. Penalties reach FJD $1 million in fines or 14 years imprisonment, with the NAMLC citing AML/CFT and proliferation-financing risks and insufficient domestic supervisory capacity as the primary rationale.

Framework: Fiji National Digital Strategy 2025-2030 (Ministry of Communications, Trade, Co-operatives, Small and Medium Enterprises); National AI Framework targeted for 2027; National AI Policy in development

Fiji has no comprehensive AI law or sector-specific AI rules in force as of May 2026. The government launched its first National Digital Strategy 2025-2030 in April 2025, which explicitly plans for a national AI framework by 2027 and acknowledges a National AI Policy under development. In the interim, AI governance is addressed indirectly through broader digital, cybersecurity, and online safety instruments.

Framework: No comprehensive data protection law. Privacy grounded in Section 24 of the 2013 Constitution, with sector-specific provisions in the Information Act 2018, Cybercrime Act 2021, and industry-specific laws (banking, medical, legal). No dedicated data protection supervisory authority exists.

Fiji lacks a unified personal data protection regime. Privacy rights derive from Section 24 of the 2013 Constitution, supplemented by the Information Act 2018 and Cybercrime Act 2021 for limited data-governance obligations. In February 2025 Cabinet endorsed a National Privacy and Personal Data Protection Policy, explicitly acknowledging the gap and committing to develop comprehensive legislation as part of the National Digital Strategy 2025-2030.

Framework: National Payment System Act 2021 (Act No. 4 of 2021) and National Payment System Regulations 2022, administered by the Reserve Bank of Fiji (RBF)

Fiji operates a dedicated, activity-based licensing regime for digital payments and e-money. The National Payment System Act 2021 and its 2022 Regulations came into force on 30 September 2022, requiring any provider of payment services or operator of a payment system to obtain a licence from the Reserve Bank of Fiji. The regime is in force and operational, with multiple payment service providers already licensed, though open banking remains at an early/aspirational stage and there is no dedicated BNPL framework.

Framework: Immigration Act 2003 (Fiji), administered by the Ministry of Immigration, immigration.gov.fj

Fiji has no dedicated digital nomad or remote-work visa. Remote workers most commonly enter on a visa-free tourist/visitor permit (up to 4 months for most nationalities), which occupies a legal grey area for remote work. Longer-term stays are possible via the Residence on Assured Income Permit or the Investor Permit, neither of which is designed specifically for digital nomads.

Framework: Online Safety Act 2018 (administered by the Online Safety Commission); Cybercrime Act 2021; Online Safety Regulations 2019

Fiji has a dedicated online safety regime anchored by the Online Safety Act 2018, which established an independent Online Safety Commission (OSC) to receive complaints about harmful electronic communications including cyberbullying, cyberstalking, and harmful content. The Cybercrime Act 2021 (in force from November 2022) addresses computer-related and content-related offences. Both laws fall short of a comprehensive EU DSA-style platform accountability framework; the Fiji Law Reform Commission launched a formal review in 2025 to strengthen definitions, introduce platform duty-of-care obligations, and expand offences.

Framework: Cybercrime Act 2021 (in force 14 November 2022); Online Safety Act 2018; Reserve Bank of Fiji Prudential Supervision Policy Statement No. 2 (Cybersecurity Risk); National Cybersecurity & Resilience Strategy 2026-2031

Fiji addresses cybersecurity through a combination of criminal-law-based cybercrime legislation (the Cybercrime Act 2021, modelled on the Budapest Convention), sector-specific rules issued by the Reserve Bank of Fiji for licensed financial institutions, and an online-harms regime under the Online Safety Act 2018. There is no comprehensive, cross-sectoral cybersecurity statute equivalent to NIS2, and no general data-protection or breach-notification law; however, the government launched the National Cybersecurity & Resilience Strategy 2026-2031 and is developing a CERT alongside pending privacy legislation.

Framework: Companies Act 2015 (No. 3 of 2015) and Investment Act 2021 (No. 5 of 2021), administered by the Registrar of Companies (ROC) under the Ministry of Justice, Fiji Revenue & Customs Service (FRCS), and Investment Fiji

Foreign investors may freely incorporate a private limited company (Pte Ltd) in Fiji through the government's businessNOW portal, but must meet a minimum capital threshold of FJD 300,000 (approx. USD 132,000) and obtain a local agent for initial e-Profile verification. The Investment Act 2021 abolished the old Foreign Investment Registration Certificate (FIRC), streamlining the process, though multi-agency post-registration compliance requirements add meaningful steps before operations can begin.