Isle of Man: technology regulation at a glance

Framework: Designated Business (Registration and Oversight) Act 2015 (DBROA); Financial Services Act 2008; AML/CFT Code 2019; Travel Rule (Transfer of Virtual Assets) Code 2024; regulated by the Isle of Man Financial Services Authority (IOMFSA)

The Isle of Man requires virtual asset service providers to register as 'designated businesses' under the DBROA 2015, imposing AML/CFT obligations but not full financial-services licensing. The IOMFSA's February-April 2024 public consultation (DP24-01) concluded with a decision to maintain the existing DBROA approach 'for the time being', monitoring international standards before considering a bespoke crypto-asset regime. The Travel Rule was enacted in 2024 and CARF automatic-exchange reporting is committed for implementation by 2027.

Framework: National AI Office (NAIO), Digital Isle of Man; Foundations (Amendment) Act 2025 (Data Asset Foundations); Data Protection Act 2018 (GDPR-equivalent)

The Isle of Man has no enacted AI-specific legislation. In January 2026 the government launched the National AI Office (NAIO) with £1 million in funding to coordinate strategy, promote responsible adoption, and deliver an island-wide AI literacy programme. A formal National AI Strategy is under development and expected by end of 2026, meaning the current posture is institutional-guidance stage rather than statutory AI regulation.

Framework: Data Protection Act 2018 (Isle of Man) + GDPR and LED Implementing Regulations 2018, supervised by the Isle of Man Information Commissioner

The Isle of Man operates a comprehensive GDPR-equivalent data protection regime. The Data Protection Act 2018 is a short framework statute that enables adoption of the EU General Data Protection Regulation (EU 2016/679) and the Law Enforcement Directive (EU 2016/680) as domestic law via secondary legislation. The Isle of Man Information Commissioner is the independent supervisory authority, and the island holds a long-standing EU adequacy decision (since 2004, reaffirmed 2024) permitting free personal-data flows from the EEA.

Framework: Financial Services Act 2008 (FSA08) and the Regulated Activities Order 2011, 'Class 8: Money Transmission Services' licence covering payment services and e-money issuance, administered by the Isle of Man Financial Services Authority (IOMFSA).

The Isle of Man operates a clear, in-force licensing regime for digital payments and e-money: any firm providing payment services or issuing electronic money in or from the Island must hold a Class 8 'Money Transmission Services' licence under the Financial Services Act 2008 and Regulated Activities Order 2011, supervised by the IOMFSA. The framework's payment-service definitions broadly mirror the EU's original Payment Services Directive (2007/64/EC), with licence-holders subject to capital, safeguarding/segregation and conduct rules. Crypto/virtual-asset activity not otherwise licensed falls under a separate AML-only 'designated business' registration rather than full prudential regulation.

Framework: Isle of Man Immigration Act 1971 (as applied and extended), Work Permits Act 1975, administered by the Isle of Man Cabinet Office (Immigration) and Department for Enterprise; separate from UK immigration law

The Isle of Man has no dedicated digital nomad visa. Remote workers and relocators must use existing pathways: a self-employed work permit (for non-Isle of Man workers), the Worker Migrant Visa (employer-sponsored), or Business Migrant routes (Start-Up/Innovator) for entrepreneurs. The government's Locate Isle of Man programme actively promotes relocation, including for remote workers, and provides guidance on permit and tax obligations.

Framework: Data Protection Act 2018 (GDPR-aligned), overseen by Isle of Man Information Commissioner; UK Online Safety Act 2023 extension under consideration via Permissive Extent Clause (s.239 OSA 2023); no standalone online safety law in force

The Isle of Man is a self-governing Crown Dependency whose parliament (Tynwald) must separately adopt any legislation, UK law does not automatically apply. It enacted a GDPR-equivalent Data Protection Act 2018 overseen by the Isle of Man Information Commissioner, imposing data-handling obligations on online platforms. The UK Online Safety Act 2023 contains a Permissive Extent Clause enabling extension to the Isle of Man by Order in Council; the IoM government formally requested this extension and confirmed support for the mechanism through 2024-25 policy decisions, but no Order in Council has been made and no dedicated online safety statute is in force as of mid-2026.

Framework: Data Protection Act 2018 (Applied GDPR) administered by the Isle of Man Information Commissioner (inforights.im); supplemented by OCSIA (Office of Cyber Security and Information Assurance) Council of Ministers Directive 2017 and IOMFSA sector-specific guidance

The Isle of Man has no standalone comprehensive cybersecurity law. Cybersecurity obligations arise primarily from the Data Protection Act 2018, which applies GDPR into domestic law and mandates security measures and 72-hour breach notification, and from sector-specific financial services rules issued by the Isle of Man Financial Services Authority (IOMFSA). The government's focal point for cyber resilience is the OCSIA, established by executive directive in 2017, with its public-facing Cyber Security Centre (CSC) launched in October 2023.

Framework: Companies Act 2006 (Isle of Man); Companies Act 1931 (legacy regime); Foreign Companies Act 2014; Financial Services Act 2008 (registered agent licensing); Beneficial Ownership Act 2017

The Isle of Man is a highly permissive jurisdiction for business formation: 100% foreign ownership is allowed with no residency requirements for directors or shareholders. Companies incorporated under the Companies Act 2006 face no minimum share capital, and standard incorporation takes 2-3 working days (same-day available for a surcharge). The principal procedural requirement is engaging a locally licensed registered agent holding a Class 4 licence from the Isle of Man Financial Services Authority.