Skip to content
World Watch

AI regulation in Gibraltar: laws & policy (2026)

AI in Gibraltar: guidelines only.

As of September 2026, Gibraltar has no comprehensive AI Act and no formal, published national AI strategy. Regulation of AI runs through existing horizontal laws — most importantly the Gibraltar GDPR and Data Protection Act 2004 — plus principles-based sectoral guidance from the GFSC, and ministerial commitments to build a DLT-style, principles-based framework via an as-yet-unformed AI taskforce.

Last verified Official sources first · MethodologyCompare Gibraltar with other countries

Legal framework

No dedicated AI legislation; a principles-based, patchwork approach anchored by the Gibraltar Financial Services Commission (GFSC) 'Policy Statement on the Use of Artificial Intelligence' (29 January 2026), existing Gibraltar GDPR / Data Protection Act 2004 (enforced by the Gibraltar Regulatory Authority / Information Commissioner), and a proposed AI regulatory taskforce announced by HM Government of Gibraltar (Ministry of Justice, Trade and Industry).

Key points: artificial intelligence in Gibraltar

  1. No dedicated AI legislation

    Gibraltar has not enacted a standalone AI law. The use of AI is assessed through existing legal frameworks (data protection, financial-services regulation, consumer and IP law) rather than an AI Act; law firms and the government both characterise the position as principles-based rather than codified.

    gibraltarlawyers.com gibraltarlaw.com

  2. GFSC Policy Statement on AI (Jan 2026)

    On 29 January 2026 the Gibraltar Financial Services Commission issued its first formal Policy Statement on the Use of Artificial Intelligence, setting a permissive, principles-based expectation for GFSC-regulated firms deploying AI, aligned with existing conduct, governance and technology-risk obligations.

    fsc.gi ramparts.gi

  3. Data protection is the primary horizontal control

    The Gibraltar GDPR and the Data Protection Act 2004, enforced by the Gibraltar Regulatory Authority as Information Commissioner, impose obligations directly relevant to AI (lawful basis, DPIAs, automated decision-making, penalties up to £17.5m or 4% of global turnover). Following the July 2025 UK–EU treaty on Gibraltar, the Data Protection Regulations 2026 re-aligned the Gibraltar GDPR with the EU GDPR.

    gra.gi gra.gi gdprlocal.com

  4. AI Futures & Foresight Conference and ministerial direction

    On 21 January 2026 the Ministry of Justice, Trade and Industry, together with Numero Partners and Hyper Island, hosted the invitation-only AI Futures & Foresight Conference. Minister Nigel Feetham reaffirmed Gibraltar's ambition to 'take a responsible lead' in AI adoption via innovation, skills and 'smart regulation', building on months of Ministry work.

    gibraltar.gov.gi gibraltar.gov.gi chronicle.gi

  5. Proposed AI regulatory taskforce (not yet formed)

    At Gibraltar Day in London 2025 the Government announced it would establish an AI taskforce of regulatory experts to design a framework, mirroring the approach that produced the 2018 DLT Regulatory Framework. As of early-to-mid 2026, the taskforce has been announced but not formally launched, and no draft AI bill has been published.

    company.gi gibraltarlaw.com

  6. EU AI Act extraterritorial reach on Gibraltar firms

    Gibraltar is outside the EU and the EU AI Act does not apply domestically, but Gibraltar-based providers, deployers, importers or distributors whose AI systems' output is used in the EU can fall within the Act's extraterritorial scope — a compliance issue flagged by local practitioners as more immediately relevant than any domestic AI law.

    legal500.com ramparts.gi

  7. Government AI deployments outpace regulation

    Since 2025 HM Government of Gibraltar has stood up multiple internal AI systems (e.g. a Tax Office chatbot supporting Llanito, a Central Arrears Unit database, a treaty chatbot, AI-assisted customs risk management, and analytics tooling used with the GFSC), demonstrating an 'adopt-then-regulate' posture consistent with the proposed principles-based framework.

    company.gi linkedin.com

Timeline of decisions

  1. Guidance · official
    AI Futures & Foresight Conference; Gibraltar commits to 'responsible lead' on AI

    HM Government of Gibraltar and Numero Partners convened C-suite leaders from finance, gaming, insurance, DLT, telecoms and law; Minister Feetham framed the goal as taking a responsible lead in AI adoption and concluded the issue is an 'alignment opportunity' between government, regulators and industry. Signals the current policy direction ahead of any AI-specific legislation.

    HM Government of Gibraltar

  2. Guidance · official
    Government announces 'Future-Proofing Gibraltar' AI conference

    The Ministry of Justice, Trade and Industry announced the invitation-only AI Futures & Foresight Conference as part of a programme on innovation, skills and 'smart regulation' to broaden Gibraltar's economic base. Marked AI moving onto the formal government agenda.

    HM Government of Gibraltar

  3. Guidance
    Government signals 'wide consultation' on regulating AI

    Chief Minister Fabian Picardo indicated the government would consult widely on whether and how to regulate AI, citing broad implications for the delivery of public services. This is the origin point of Gibraltar's deliberation over a dedicated AI regime, which as of 2026 has not yet produced legislation.

    Gibraltar Chronicle

Sources

  1. gibraltar.gov.gi/press-releases/gibraltar-advances-responsible-ai-leadership-following
  2. gibraltar.gov.gi/press-releases/future-proofing-gibraltar-the-ai-futures-foresight-con
  3. fsc.gi/news
  4. gra.gi/data-protection
  5. gra.gi/data-protection/legislation/acts-regs
  6. gibraltarlawyers.com/insights/artificial-intelligence-ai/
  7. gibraltarlaw.com/insights/post/102m1tm/gibraltar-and-ai-confidence-complexity-and-the-
  8. ramparts.gi/ai-law-knowledge-hub/
  9. company.gi/guide/ai/regulation
  10. company.gi/guide/ai
  11. legal500.com/developments/thought-leadership/bots-borders-and-brussels-the-eu-ai-a
  12. chronicle.gi/feetham-urges-gibraltar-to-take-responsible-lead-on-ai-adoption/
  13. gdprlocal.com/gibraltar-data-protection-practices-and-regulations/
  14. linkedin.com/posts/government-of-gibraltar_the-ministry-for-justice-trade-and-indu

Next for Gibraltar: Data & PrivacyComprehensive law

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 15 Sept 2026. Methodology & how to cite · State of Technology Regulation 2026