Grenada: technology regulation at a glance

Framework: Virtual Asset Business Act No. 7 of 2021; Virtual Asset Business Regulations 2024 (S.R.O. 9 of 2024); supervised by the Grenada Authority for the Regulation of Financial Institutions (GARFIN)

Grenada enacted the Virtual Asset Business Act 2021, requiring all entities operating virtual asset businesses in or from Grenada to register with GARFIN and comply with AML/CFT obligations. Implementing regulations (S.R.O. 9 of 2024) were gazetted in 2024, approximately three years after the Act passed, activating the formal registration process. The framework covers VASP licensing and custody at a baseline level but has significant gaps: no dedicated rules for stablecoins, DeFi, or token offerings, and limited tax guidance.

Framework: No national AI law; participates in regional voluntary frameworks: UNESCO Caribbean AI Policy Roadmap (2022) and CTU Caribbean AI Task Force (2025); Data Protection Act No. 1 of 2023 provides tangential personal-data governance

Grenada has enacted no dedicated national AI legislation and has no formal proposal before parliament for one. The country relies on regional voluntary instruments, the UNESCO Caribbean AI Policy Roadmap and the Caribbean Telecommunications Union (CTU) Caribbean AI Task Force interim report, while the 2023 Data Protection Act supplies the closest domestic legal layer relevant to AI through personal-data rules. Prime Minister Dickon Mitchell has publicly championed AI investment and a harmonised Caribbean digital governance framework, but domestic AI-specific binding rules remain absent.

Framework: Data Protection Act, No. 1 of 2023; supervised by the Information Commission

Grenada enacted the Data Protection Act (No. 1 of 2023), which received gubernatorial assent on 9 May 2023 and was published in the Official Gazette on 10 May 2023, establishing a comprehensive personal-data protection regime covering both public and private entities. The Act creates an Information Commission as the dedicated supervisory authority and confers GDPR-style rights on data subjects. Commencement was to be fixed by ministerial Gazette order; enforcement activity directed at financial institutions reported in mid-2025 indicates the Act is operative.

Framework: Payment System and Services Act, 2025 (enacted in Grenada), administered with the Eastern Caribbean Central Bank (ECCB) as the regional payment-system overseer/licensor; bank licensing under the Banking Act; non-bank money services and virtual-asset businesses licensed/registered by the Grenada Authority for the Regulation of Financial Institutions (GARFIN) under the Money Services Business Act (Cap 198A) and the Virtual Asset Business Act, 2021.

Grenada, a member of the Eastern Caribbean Currency Union (ECCU), operates under a clear licensing regime for digital payments. The Payment System and Services Act, 2025, which Grenada is one of the first three ECCU states to pass into law, establishes structured licensing of payment service providers, ECCB oversight, consumer protection and a fintech regulatory sandbox, while non-bank money-transfer and virtual-asset firms are licensed/registered by GARFIN. Shared ECCU rails (ECACH clearing, electronic funds transfers and an emerging instant-payment system) provide the underlying retail-payment infrastructure.

Framework: Remote Employment Act 2021 (Grenada Parliament); Citizenship by Investment Act No. 15 of 2013 (Investment Migration Agency, IMA)

Grenada enacted the Remote Employment Act in October 2021, establishing a dedicated visa category for remote workers and digital nomads to reside in Grenada for up to two years while employed by or contracting with entities outside the country. Separately, Grenada operates a long-standing Citizenship by Investment (CBI) programme under the IMA, offering a route to full citizenship via qualifying investments. Foreign-sourced income earned under the digital nomad visa is not subject to Grenada income tax due to the territorial tax structure.

Framework: Electronic Crimes Act 2013 (Act No. 23 of 2013, amended Act No. 10 of 2014); Data Protection Act 2023 (Act No. 1 of 2023); Council of Europe Budapest Convention (acceded 2024)

Grenada's online safety regime is anchored by the Electronic Crimes Act 2013, which criminalises 16 cyber offences including child pornography, identity theft, electronic fraud, and violation of privacy, but does not impose comprehensive platform-moderation or age-verification obligations on service providers. A Data Protection Act was enacted in 2023 but no EU-DSA- or UK-OSA-equivalent online safety law exists. In 2024 Grenada became the first CARICOM state to accede to the Budapest Convention on Cybercrime, signalling intent to deepen its legal framework.

Framework: Electronic Crimes Act No. 23 of 2013 (amended by Act No. 10 of 2014, in force 2016) and Data Protection Act No. 1 of 2023; operationally supported by the National Cybersecurity Incident Response Team (CSIRT) established May 2022

Grenada addresses cybersecurity through two principal statutes, a cybercrime law criminalising 16 categories of electronic offences, and a 2023 data-protection law that imposes security and breach-notification obligations on data controllers. In April 2024 Grenada became the first CARICOM nation to accede to the Budapest Convention on Cybercrime, signalling alignment toward future comprehensive reform. A dedicated national Cybersecurity Agency, Security Operations Centre (SOC), and Network Operations Centre (NOC) are under development with infrastructure completion targeted for 2027.

Framework: Grenada Companies Act (Cap. 241), administered by the Corporate Affairs and Intellectual Property Office (CAIPO); investment facilitation by the Grenada Investment Development Corporation (GIDC)

Grenada maintains an open, non-discriminatory investment climate, applying identical laws and regulations to foreign and domestic investors. There is no minimum share capital requirement and no foreign-ownership cap across most sectors. Company registration is straightforward, requiring 4 procedures and typically 8-12 days to complete.