Virgin Islands

Breach Notification Law (Designated by Statutory Number)
CITATION	V.I. Code Annotated tit. 14 §§ 2208, 2209
ENACTED	2005
SUMMARY	§ 2208 applies to governmental agencies. § 2209 applies to individuals and businesses. The law requires governmental agencies, businesses and individuals that own or license computerized data that includes personal information to notify residents of the Virgin Islands whose personal information may have been involved in a breach.
DATA COVERED	The laws cover ‘Personal Information’ which is defined to mean an individual’s first name or first initial and last name in combination with any one or more of the following, when either the name or the data elements are not encrypted: Social Security number; Driver’s license number; and Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual’s financial account.
INDUSTRY	§ 2208 applies to governmental agencies. § 2209 applies to individuals and businesses. The law requires governmental agencies, businesses and individuals that own or license computerized data that includes personal information to notify residents of the Virgin Islands whose personal information may have been involved in a breach.
PENALTIES	Plaintiff can seek monetary damages and an injunction.