Saint Lucia: technology regulation at a glance

Framework: Virtual Asset Business Act, 2022 (Act No. 24 of 2022); Financial Services Regulatory Authority (FSRA); Virtual Asset Business Regulations (January 2025)

Saint Lucia enacted the Virtual Asset Business Act (Act No. 24 of 2022) in December 2022, establishing a mandatory FSRA licensing regime for all virtual asset service providers covering exchange, custody, transfer, and token-issuance activities. Crypto assets are legal but not recognised as legal tender; the Eastern Caribbean Central Bank (ECCB) does not regulate private crypto but operates the DCash CBDC as the region's sole digital legal tender and has issued public risk advisories. Updated VASP regulations and licensing guidance were published by the FSRA in January 2025.

Framework: No dedicated AI law, strategy, or national guidelines in force. AI-relevant governance is limited to the partially-proclaimed Data Protection Act (2011) and endorsement of the non-binding regional Santiago Declaration on ethical AI (2023).

As of 2026 Saint Lucia has no comprehensive AI law, no sectoral AI rules, and no published national AI strategy or domestic AI guidelines. Its only AI-specific commitment is having signed the regional, non-binding Santiago Declaration to Promote Ethical Artificial Intelligence in Latin America and the Caribbean (2023), and AI questions are touched only indirectly by its data-protection regime and ongoing digital-transformation projects. Government activity to date consists of awareness, capacity-building and infrastructure work rather than regulation.

Framework: Data Protection Act, Cap. 8.18 (enacted 2011, amended 2015, partially in force January 2023, fully in force 1 January 2025), supervised by the Data Protection Commissioner, Saint Lucia

Saint Lucia has a comprehensive, cross-sector Data Protection Act (Cap. 8.18) that fully entered into force on 1 January 2025 after a phased commencement beginning in 2023. The Act establishes core data-protection principles, a registration regime for data controllers, data-subject rights, and an independent supervisory authority (the Data Protection Commissioner) with investigation and enforcement powers. It applies to all organisations processing personal data in Saint Lucia, including foreign entities.

Framework: Eastern Caribbean Central Bank (ECCB) regional oversight under the Payment System Act 2008 and the new Payment System and Services Act 2025 (passed into law in Saint Lucia), plus national licensing by the Financial Services Regulatory Authority (FSRA) under the Money Services Business Act No. 11 of 2010 and the Virtual Asset Business Act.

Saint Lucia operates within the ECCU, where the Eastern Caribbean Central Bank licenses and oversees payment systems and payment service providers while the national Financial Services Regulatory Authority (FSRA) licenses non-bank money services businesses and virtual-asset providers. A clear licensing regime is in force: the Money Services Business Act (2010) covers money transmission, and the modernised Payment System and Services Act 2025, which introduces structured PSP/e-money licensing, a fintech regulatory sandbox and consumer-protection rules, has been passed into law in Saint Lucia. Instant-payment infrastructure is in transition, with the ECCB shifting from the discontinued DCash CBDC toward a regional Fast Payment System.

Framework: Saint Lucia Immigration Act (Cap. 3.13); 'Don't Just Visit, Live It' Programme administered jointly by the Immigration Department (Royal Saint Lucia Police Force) and the Saint Lucia Tourism Authority; Citizenship by Investment Unit under the Saint Lucia Citizenship by Investment Act No. 14 of 2015

Saint Lucia operates a dedicated digital nomad visa programme, 'Don't Just Visit, Live It', launched in March 2021, granting remote workers, freelancers, and distance-learning students a multiple-entry non-immigrant visa valid for up to 12 months, renewable indefinitely while eligibility is maintained. Holders may work exclusively for employers or clients outside Saint Lucia and benefit from the country's territorial tax system, under which foreign-sourced income is not subject to local income tax. A separate Citizenship by Investment Programme (CIP) offers a fast-track route to full citizenship without any residency requirement.

Framework: Computer Misuse Act 2011; Data Protection Act 2011 (Cap 8.18); Electronic Transactions Act; Telecommunications Act 2000 (NTRC regulator)

Saint Lucia has a patchwork of partial online-safety instruments, cybercrime prohibitions, data-protection rules, and electronic-transaction intermediary provisions, but no comprehensive online-safety or platform-regulation law comparable to the EU DSA or UK Online Safety Act. The government does not restrict or censor internet access, and constitutional free-expression protections are upheld. Platform content-moderation obligations, age-verification requirements, and a dedicated online-safety regulator remain absent; regional momentum through CARICOM may eventually prompt a harmonised approach.

Framework: Computer Misuse Act 2011 (Cap 13.17) and Privacy and Data Protection Act (Cap 8.18), overseen by the Data Protection Commissioner and the National Telecommunications Regulatory Commission (NTRC)

Saint Lucia's cybersecurity regime rests on two primary statutes: the Computer Misuse Act 2011, which criminalises unauthorised access, fraud, and malicious communications, and the Privacy and Data Protection Act, which imposes security obligations on data controllers. No comprehensive national cybersecurity law or formally adopted national cybersecurity strategy is in force; institutional capacity, including a government Cyber Incident Response Team (CIRT), is still being built under the World Bank-funded Caribbean Digital Transformation Project (CARDTP), with CIRT recruitment planned for 2026.

Framework: Companies Act (Cap. 13.01) and International Business Companies Act (Cap. 12.14), administered by the Saint Lucia Commercial Registry and Invest Saint Lucia

Saint Lucia is a highly open jurisdiction for foreign business formation: 100% foreign ownership is permitted in all private sectors with no minimum capital requirement and no foreign-ownership caps. Both domestic companies and International Business Companies (IBCs) can be incorporated in 2-3 business days, with Invest Saint Lucia providing one-stop facilitation for foreign investors.