Saint Vincent and the Grenadines: technology regulation at a glance

Framework: Virtual Asset Business Act 2022 (VABA), in force 31 May 2025; administered by the Financial Services Authority (FSA) with AML/CFT co-supervision by the SVG Financial Intelligence Unit (SVGFIU)

Saint Vincent and the Grenadines enacted the Virtual Asset Business Act (VABA) in 2022, which came into full legal force on 31 May 2025, establishing a mandatory registration and licensing regime for all virtual asset service providers (VASPs) operating in or from SVG. The Financial Services Authority (FSA) supervises registered VASPs for conduct, capital adequacy, and FATF-aligned AML/CFT compliance. Crypto is fully legal; the jurisdiction levies no capital-gains tax and no corporate income tax on VASP businesses, positioning SVG as a competitive offshore crypto-licensing hub.

Framework: No dedicated AI law or national AI strategy; adjacent governance via Data Protection Act 2021 and participation in the CTU Caribbean AI Task Force and UNESCO Caribbean AI Policy Roadmap

Saint Vincent and the Grenadines has enacted no AI-specific legislation, sectoral AI rules, or formal national AI guidelines as of May 2026. The country relies on general data protection and cybersecurity statutes for AI-adjacent issues and participates in regional Caribbean initiatives that are still in consultative, pre-adoption phases. No domestic AI bill has been proposed in Parliament.

Framework: Privacy Act No. 17 of 2003 (enacted but never commenced); Cybercrime Act 2016 (in force, tangential protections); no active supervisory authority

Saint Vincent and the Grenadines enacted the Privacy Act in 2003, establishing a framework for the protection of personal information held by public authorities. However, the Act has never been brought into force, as the required commencement order has never been issued by the Minister, leaving no enforceable data protection regime as of 2026. The Cybercrime Act 2016 provides limited, indirect protections through criminal offences related to unauthorised access and data interference.

Framework: Financial Services Authority Act (2012); Money Services Business Act; Virtual Asset Business Act 2022 (in force 31 May 2025); Eastern Caribbean Central Bank (ECCB) monetary oversight; ECCB model Payment System and Services Bill (2025, not yet enacted in SVG)

Saint Vincent and the Grenadines has a partial digital payments regulatory framework: the FSA licenses money services businesses under the MSB Act, and a VASP licensing regime under the Virtual Asset Business Act came into force on 31 May 2025. However, SVG has not yet enacted the ECCB's model Payment System and Services Bill (2025), which would create a comprehensive regime for payment service providers and e-money issuers, leaving a structural gap relative to some regional peers where the bill has already passed.

Framework: Immigration Act (Cap. 91), administered by the Immigration Unit, Ministry of National Security, Air and Sea Port Development; work permits processed through the Office of the Prime Minister

Saint Vincent and the Grenadines has no dedicated digital nomad or remote-work visa. However, most nationalities receive a visa-free visitor permit on arrival (up to 6 months for CARICOM, UK, Schengen, and US nationals; 3 months for others), which can be extended at the Immigration Head Office in Kingstown. A separate residency permit route exists for longer-term stays, processed through the Prime Minister's Office. A Citizenship by Investment Programme is planned for mid-2026 under newly elected Prime Minister Goodwin Friday, which will include a mandatory residency component.

Framework: Cybercrime Act 2016; Electronic Transactions Act 2015; Data Protection Act 2021; regulated at telecom level by the Eastern Caribbean Telecommunications Authority (ECTEL)

Saint Vincent and the Grenadines has a patchwork of sector-specific digital laws, principally the Cybercrime Act 2016 and Electronic Transactions Act 2015, but no comprehensive online safety or platform-regulation statute equivalent to the EU DSA or UK OSA. The Data Protection Act 2021 established a Data Protection Commissioner, while the earlier Privacy Act 2003 remains unenforced. There is no government censorship of internet access or content, and no dedicated age-verification or platform-liability regime beyond ISP safe-harbour rules in the Cybercrime Act.

Framework: Cybercrime Act No. 20 of 2016; Data Protection Act 2021; CARICOM Cyber Security and Cybercrime Action Plan (CCSCAP) 2017

Saint Vincent and the Grenadines addresses cybersecurity through a sector-specific combination of criminal law and data protection rather than a single comprehensive cybersecurity statute. The Cybercrime Act 2016 criminalises offences against computer systems and critical infrastructure and mirrors the Budapest Convention's substantive and procedural provisions. The Data Protection Act 2021 adds mandatory breach-notification obligations for personal-data controllers, while no overarching NIS2-style critical-infrastructure security law is in force.

Framework: Business Companies Act (2007, as amended) and Limited Liability Companies Act (2008), regulated by the Financial Services Authority (FSA); domestic companies and business names registered via the Commerce and Intellectual Property Office (CIPO)

Saint Vincent and the Grenadines offers one of the Caribbean's most accessible company formation regimes for foreigners. Business Companies (BCs) and Limited Liability Companies (LLCs) permit 100% foreign ownership with no local-director requirements, no minimum capital, and incorporation completed within 24 hours via a licensed Registered Agent. Domestic company formation for non-nationals operating locally requires a Prime Minister's Office licence to hold more than 50% equity, but the offshore BC/LLC route faces no such restriction.