🔒 Data Protection Regulatory Intelligence
Data Protection Monitor · dataprotection.gi
AG v13-gdpri-1.0.0
content: ai_generated legal review: never_reviewed (informational) publication gate: 2 failing4 sources retrieved model claude-sonnet-5 · 2026-10-03

AG

AG schema gdpri-v2 trajectory: not yet assessedin transitionoverlaps: FIM, Crypto

Antigua and Barbuda's core data-protection framework, the Data Protection Act, 2013, has not itself been amended this cycle, but a new sectoral cross-reference in payments legislation is extending its reach into a specific financial-services context.

Data collected Data published

AI-assembled from cited sources

Not covered: Lawful Processing & Special Data, Data Subject Rights, Controller/Processor Duties, Cross-Border & Adequacy, AdTech & Commercial Privacy, Algorithmic, Biometric & Surveillance Governance, Children & Vulnerable Groups, Enforcement & Redress. Not fully checked this cycle: Regulator & Framework (3 open gaps).

10 categories · 3 claims · 8 sources in the cumulative register

10Categoriesbaseline.[]
58Sub-modulesbaseline..sub_modules{}
3Claimsbaseline..claims[]
0Tier-1 sourcesrun_metadata.t1_source_count
Traffic-light mix (sums to 10 rendered categories; click to filter)
No red categories; 56 sub-modules are flagged red.

Jurisdiction lead brief

Standing brief, as of 11 October 2026.

Lead Signal

Antigua and Barbuda's core data-protection framework, the Data Protection Act, 2013, has not itself been amended this cycle, but a new sectoral cross-reference in payments legislation is extending its reach into a specific financial-services context. The Payment Systems and Services Act, 2025, requires a licensee or participant to process personal data through a system that facilitates the prevention, detection and investigation of payment fraud, and requires that personal data be processed in accordance with the Data Protection Act, 2013 and any law governing data protection. This provision is enacted but not yet effective, since the Act as a whole commences only on a date to be appointed by the Minister by Notice published in the Gazette, which has not yet been published.

10 of 10 categories
Signal
Density

Selections OR within a group, AND across groups. Press / to search.

#

A named regulator and instrument exist in a reputable secondary directory, but primary-instrument verification, scope provisions, and registration mechanics are unconfirmed, so this cannot be rated green.

Primary frameworkData Protection Act (Law No. 10-13) — cited only via secondary directory; primary gazette/legislation.gov text not located
Supervisory authorityThe Information Commissioner
Traffic-light rationale — AmberA named regulator and instrument exist in a reputable secondary directory, but primary-instrument verification, scope provisions, and registration mechanics are unconfirmed, so this cannot be rated green.

Sub-modules (5)

Regulator And AuthorityAmber

IAPP's directory names the Information Commissioner as the data protection authority for Antigua and Barbuda, but no dedicated data-protection enforcement webpage, statutory-appointment provision, or independence safeguards could be verified.

Claims (1):

  • <cite index="50-10,50-11">Antigua and Barbuda's listed Data Protection Authority is 'The Information Commissioner' and its listed privacy legislation is the 'Data Protection Act (Law No. 10-13)'</cite>, per IAPP's Global Privacy Law and DPA Directory; this secondary-source listing could not be cross-verified against primary gazetted text, a commencement instrument, or an operational DP-specific enforcement record within this research pass.

Act And InstrumentsRed

The sole located reference to an Antigua and Barbuda data protection statute is the IAPP directory's label 'Data Protection Act (Law No. 10-13)'. No primary text, official Gazette citation, or confirmed year/number could be independently verified.

Absence provenance: unavailable. Searched: Antigua and Barbuda Data Protection Act 2013 text, laws.gov.ag Antigua data protection, Antigua Barbuda Official Gazette data protection act.

Material ScopeRed

No source located defining the material scope (what data/processing is caught) of any Antigua and Barbuda data protection instrument.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act material scope personal data definition.

Territorial ScopeRed

No source located addressing territorial/extraterritorial application (establishment test, targeting/monitoring limbs, representative-appointment duty) for Antigua and Barbuda.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act territorial scope extraterritorial.

Regulator Registration And FilingRed

No source located confirming a controller registration/notification/fee regime for Antigua and Barbuda analogous to Caribbean peer statutes (e.g., Saint Lucia's or proposed Barbados's controller-registration models).

Absence provenance: unavailable. Searched: Antigua Barbuda data controller registration fee Information Commissioner.

Category narrative64 words

Secondary-source tracking (IAPP's Global Privacy Law and DPA Directory) lists Antigua and Barbuda as having a named data protection authority and a titled statute, but no primary gazette text, commencement order, or regulator enforcement portal for data protection specifically could be located or verified within this research pass. No Tier-1 anchor was supplied in the seed for this JID, and none was independently found.

Sources and claims (1)
  1. UncertainIAPP — <cite index="50-10,50-11">Antigua and Barbuda's listed Data Protection Authority is 'The Information Commissioner' and its listed privacy legislation is the 'Data Protection Act (Law No. 10-13)'</cite>, per IAPP's Global Privacy Law and DPA Directory; this secondary-source listing could not be cross-verified against primary gazetted text, a commencement instrument, or an operational DP-specific enforcement record within this research pass.observed

#

No claim-level evidence located for this JID; heaviest gap-weighted module per prompt priority is unresolved.

Traffic-light rationale — Not assessedNo claim-level evidence located for this JID; heaviest gap-weighted module per prompt priority is unresolved.

Sub-modules (4)

Lawful BasesRed

No Antigua-specific source located on enumerated lawful bases.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act lawful basis legitimate interest.

Special CategoriesRed

No Antigua-specific source located on special/sensitive category or criminal-offence data conditions.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act sensitive personal data special category.

Pseudonymisation And AnonymisationRed

No Antigua-specific source located on pseudonymisation/anonymisation tests.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act anonymisation pseudonymisation.

Category narrative50 words

No primary or secondary source located setting out lawful bases, consent validity conditions, special-category/criminal-data conditions, or pseudonymisation/anonymisation tests under any Antigua and Barbuda instrument. Searches targeting the Data Protection Act's substantive provisions returned only Caribbean-regional commentary for other jurisdictions (Barbados draft bill, Bahamas, Saint Lucia, Cayman) with no Antigua-specific text.

#

No in-JID evidence located; out-of-JID comparator statutes deliberately excluded per JID discipline.

Traffic-light rationale — Not assessedNo in-JID evidence located; out-of-JID comparator statutes deliberately excluded per JID discipline.

Sub-modules (5)

Access RightRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act subject access request.

Rectification And ErasureRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act right to erasure rectification.

Restriction And ObjectionRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act right to object restrict processing.

Data PortabilityRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act data portability.

Deadlines And Response WindowsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act response deadline subject access.

Category narrative34 words

No Antigua-specific source located on access, rectification/erasure, restriction/objection, portability, or statutory response deadlines. Regional comparators located (Barbados draft bill, Saint Lucia Act) are NOT cited here as they are out-of-JID and would misattribute findings.

#

No claim-level evidence located for this JID across any sub-module.

Traffic-light rationale — Not assessedNo claim-level evidence located for this JID across any sub-module.

Sub-modules (7)

Accountability And DpiaRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act DPIA accountability.

Dpo RequirementsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection officer appointment threshold.

Ropa RequirementsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda records of processing register data controllers.

Joint Controller ArrangementsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda joint controller processor contract terms.

Security MeasuresRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act security of processing.

Breach NotificationRed

No source located on a data-protection breach-notification rule (regulator or data-subject notice) for Antigua and Barbuda. Note: cyber-incident reporting under the Digital Assets Business Act (sectoral, VASP-specific) is tracked separately under sectoral_watch.financial_sector_overlay and is out of scope here per the ICT-resilience carve-out.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection breach notification deadline regulator.

Retention And DisposalRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act retention limits disposal.

Category narrative28 words

No Antigua-specific source located on DPIA triggers, DPO thresholds, ROPA exemptions, joint-controller rules, security-of-processing measures, breach notification timelines/thresholds, or retention/disposal duties under any Antigua and Barbuda data-protection instrument.

no periodic updates on record for this sub-brief

#

Priority module per prompt ordering but zero in-JID evidence located despite targeted searching.

Traffic-light rationale — Not assessedPriority module per prompt ordering but zero in-JID evidence located despite targeted searching.

Sub-modules (6)

Transfer MechanismsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act international transfer mechanism.

Adequacy ReceivedRed

No EU or other adequacy decision referencing Antigua and Barbuda located.

Absence provenance: unavailable. Searched: EU adequacy decision Antigua and Barbuda.

Adequacy GrantedRed

No source located on any adequacy finding Antigua and Barbuda may extend to other regimes.

Absence provenance: unavailable. Searched: Antigua Barbuda adequacy decision granted.

Sccs And BcrsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda standard contractual clauses binding corporate rules.

Transfer Impact AssessmentRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda transfer impact assessment requirement.

Data LocalisationRed

No source located on any data-localisation mandate.

Absence provenance: unavailable. Searched: Antigua Barbuda data localisation requirement.

Category narrative32 words

No source located on transfer mechanisms, adequacy decisions received or granted, SCC/BCR uptake, transfer-impact-assessment duties, or data-localisation mandates for Antigua and Barbuda. No EU adequacy decision covering Antigua and Barbuda was identified.

#

Concrete sectoral (financial/VASP) regulatory evidence exists, but it is AML/cybersecurity-incident focused rather than data-protection-specific, and no data_access_sharing, health, telecoms, employment, credit, education or insurance overlay evidence was found.

Primary frameworkDigital Assets Business Act 2020 (VASP regulatory framework) — general data-protection sectoral overlays otherwise unverified
Supervisory authorityFinancial Services Regulatory Commission
Traffic-light rationale — AmberConcrete sectoral (financial/VASP) regulatory evidence exists, but it is AML/cybersecurity-incident focused rather than data-protection-specific, and no data_access_sharing, health, telecoms, employment, credit, education or insurance overlay evidence was found.

Sub-modules (8)

Financial Sector OverlayAmber

Antigua and Barbuda regulates virtual asset service providers via the Digital Assets Business Bill/Act 2020, administered by the Financial Services Regulatory Commission, with CFATF tracking the jurisdiction's AML/CFT compliance.

Claims (2):

  • <cite index="36-3,36-4">Antigua and Barbuda's House of Representatives passed, on 27 May 2020, the Digital Assets Business Bill 2020 as part of a regulatory framework to regulate virtual asset service providers, making it mandatory for digital asset businesses to be registered with the Financial Services Regulatory Commission</cite>; <cite index="36-6,36-7">the Bill also mandates senior representatives to report cyber security incidents and outlines fines of up to $250,000 for non-compliance, with a possibility of criminal charges</cite>.
  • <cite index="37-3">The Caribbean Financial Action Task Force announced, on 22 November 2021, that Antigua and Barbuda has complied with 11 and is largely compliant with 25 of the CFATF recommendations on anti-money laundering and combating the financing of terrorism measures</cite>, evidencing an active sectoral AML oversight regime operating alongside the jurisdiction's general (unverified) data-protection framework.

Health Sector OverlayRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda health data privacy sector rules.

Telecoms And EprivacyRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda telecoms ePrivacy traffic location data retention.

Employment DataRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda employment data protection employee records.

Credit And ScoringRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda credit reporting scoring data rules.

EducationRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda education sector data protection rules.

InsuranceRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda insurance sector data protection rules.

Data Access SharingRed

No Data Act analogue or local smart-data/data-portability scheme located for Antigua and Barbuda.

Absence provenance: unavailable. Searched: Antigua Barbuda data access sharing smart data portability scheme.

Category narrative55 words

The clearest documented Antigua and Barbuda regulatory activity located concerns the financial/virtual-asset sector rather than general data protection: a Digital Assets Business Bill regulating virtual asset service providers (VASPs), and CFATF AML/CFT compliance monitoring. These sit beside, and do not substitute for, a general data-protection regime, which remains unverified in primary form for this JID.

no periodic updates on record for this sub-brief

Sources and claims (2)
  1. ProbableOneTrust DataGuidance — <cite index="36-3,36-4">Antigua and Barbuda's House of Representatives passed, on 27 May 2020, the Digital Assets Business Bill 2020 as part of a regulatory framework to regulate virtual asset service providers, making it mandatory for digital asset businesses to be registered with the Financial Services Regulatory Commission</cite>; <cite index="36-6,36-7">the Bill also mandates senior representatives to report cyber security incidents and outlines fines of up to $250,000 for non-compliance, with a possibility of criminal charges</cite>.observed
  2. ProbableOneTrust DataGuidance — <cite index="37-3">The Caribbean Financial Action Task Force announced, on 22 November 2021, that Antigua and Barbuda has complied with 11 and is largely compliant with 25 of the CFATF recommendations on anti-money laundering and combating the financing of terrorism measures</cite>, evidencing an active sectoral AML oversight regime operating alongside the jurisdiction's general (unverified) data-protection framework.observed

#

Priority module per prompt ordering but zero in-JID evidence located.

Traffic-light rationale — Not assessedPriority module per prompt ordering but zero in-JID evidence located.

Sub-modules (6)

Cookies And TrackersRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda cookie consent law ePrivacy.

Dark PatternsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda dark pattern consumer protection law.

Opt Out SignalsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda opt out signal global privacy control.

Clean Rooms And DcrRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda data clean room rules.

Cross Context AdvertisingRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda cross context advertising data sale share.

Direct MarketingRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda direct marketing consent suppression rule.

Category narrative22 words

No source located on cookie/tracker rules, dark-pattern prohibitions, opt-out signals, clean-room rules, cross-context advertising, or direct-marketing consent/suppression rules for Antigua and Barbuda.

#

Priority module per prompt ordering but zero in-JID evidence located.

Traffic-light rationale — Not assessedPriority module per prompt ordering but zero in-JID evidence located.

Sub-modules (6)

Profiling RestrictionsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda profiling restriction automated decision.

Automated Decision Making TransparencyRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda automated decision making transparency right explanation.

Ai Risk AssessmentsRed

No local AI-specific risk-assessment regime identified; EU AI Act does not apply to this non-EU JID.

Absence provenance: unavailable. Searched: Antigua Barbuda AI law risk assessment.

Biometric RegimeRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda biometric data facial recognition law.

Genetic DataRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda genetic data regulation.

State Surveillance CarveoutsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda national security surveillance data protection exemption.

Category narrative37 words

No source located on profiling restrictions, ADM transparency, AI-specific risk assessments, biometric regime, genetic data regime, or state-surveillance carveouts for Antigua and Barbuda. No AI Act interface applies (non-EU JID) and no local AI statute was identified.

#

Zero in-JID evidence located despite targeted searching.

Traffic-light rationale — Not assessedZero in-JID evidence located despite targeted searching.

Sub-modules (5)

Age VerificationRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda age of digital consent children data.

Minor Profiling BansRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda minor profiling advertising ban.

Education SettingsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda education settings data protection rules children.

Dependent AdultsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda dependent adults vulnerable persons data protection.

Category narrative21 words

No source located on age of digital consent, parental-consent mechanisms, minor-profiling bans, education-settings rules, or dependent-adult protections for Antigua and Barbuda.

#

Priority module per prompt ordering but zero DP-specific enforcement evidence located; the only adjacent finding is sectoral (AML) and is cross-referenced rather than duplicated here.

Traffic-light rationale — Not assessedPriority module per prompt ordering but zero DP-specific enforcement evidence located; the only adjacent finding is sectoral (AML) and is cross-referenced rather than duplicated here.

Sub-modules (6)

Regulator Powers And PenaltiesRed

No source located on DP regulator's investigative powers or maximum penalties.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection act maximum fine penalty.

Enforcement Activity IndexRed

No DP enforcement decisions, fines, or case activity located for Antigua and Barbuda in the last 12 months.

Absence provenance: unavailable. Searched: Antigua Barbuda Information Commissioner data protection enforcement decision 2025 2026.

Regulator Funding And CapacityRed

No source located on the Information Commissioner's funding or headcount for data-protection functions.

Absence provenance: unavailable. Searched: Antigua Barbuda Information Commissioner office budget staff.

Collective Redress And Class ActionsRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda collective redress class action data protection.

Private Right Of ActionRed

No source located.

Absence provenance: unavailable. Searched: Antigua Barbuda private right of action data protection court.

Recent Developments 180DRed

No data-protection-specific legislative, case-law, guidance, or adequacy developments located for Antigua and Barbuda within the last 180 days.

Absence provenance: unavailable. Searched: Antigua Barbuda data protection law 2026 update, Antigua Barbuda data protection news recent.

Category narrative52 words

No source located on data-protection-specific maximum fines, procedural/investigation deadlines, appeal routes, complaint-handling duties, representative/collective-action mechanisms, compensation rules, limitation periods, or a 12-month enforcement record for Antigua and Barbuda. The only enforcement-adjacent activity located (CFATF AML/CFT compliance monitoring) is a financial-sector mechanism, not a data-protection enforcement action, and is recorded instead under sectoral_watch.financial_sector_overlay.

No categories match.

Filters combine as OR inside a group and AND across groups.

Publication gate

Blocking. 2 failing check(s).

schema_validpass
min_quoted_text_presentwaived — floor 0%
translation_provenance_recordedn/a — no subject in this jurisdiction
egress_verifiedpass
min_t1_per_instrument_metn/a — no subject in this jurisdiction
jurisdiction_source_floor_metFAIL
source_tier_integrity_okpass
manual_overrideFAIL
tier_a_b_national_primary_pct0.0
aggregator_only_jurisdiction_count1

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for AG
FieldValue
trust.lawyer_review.statusnever_reviewed
trust.lawyer_review.reviewerno reviewer on record
trust.content_sourceai_generated

Provenance and declared absence

Disclosure model: category cards load OPEN; narratives render in full; standing narratives load as a clamped teaser with an explicit “read full” control carrying the true word count. No text is hidden without disclosing how much of it there is.

Sub-modules are DP-specific nested subsections with their own real per-sub-module traffic light, rendered under each category (BRIEF section 2b.5). Neither WPM nor the crypto monitor carries this field.

Traffic-light dots are REAL data (baseline.<category>.traffic_light), not renderer-invented taxonomy, and are never suppressed -- unlike WPM, where a RAG dot would be forbidden as invented severity.

Family/accent taxonomy is renderer-level presentation config, not a JID field; it decorates the RAG dot, it does not replace it. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-10-20. A year-precision row is never promoted into a tighter band.

Envelope: baseline resolved at jurisdiction_json.baseline; 10 categories, 58 sub-module(s), 3 claim(s) (3 category placement(s)), 8 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 6 Oct 2026: nothing tested (no claim on this page was eligible for an automated test). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.

GDPR article map

Cross-reference: which category/sub-module covers each UK GDPR article (14 mapped).

Show article map
GDPR article to category mapping
ArticleCategorySub-module
Art. 5Controller/Processor Dutiesaccountability and dpia
Art. 6Lawful Processing & Special Datalawful bases
Art. 7Lawful Processing & Special Dataconsent thresholds
Art. 9Lawful Processing & Special Dataspecial categories
Art. 22Algorithmic, Biometric & Surveillance Governanceautomated decision making transparency
Art. 25Controller/Processor Dutiesaccountability and dpia
Art. 28Controller/Processor Dutiesjoint controller arrangements
Art. 30Controller/Processor Dutiesropa requirements
Art. 35Controller/Processor Dutiesaccountability and dpia
Art. 13-22Data Subject Rightsaccess right
Art. 32-34Controller/Processor Dutiessecurity measures
Art. 37-39Controller/Processor Dutiesdpo requirements
Art. 44-49Cross-Border & Adequacytransfer mechanisms
Art. 77-84Enforcement & Redressregulator powers and penalties

Self-audit

No Tier-1 (primary legislative/regulator-text) anchors were located or seeded for JID=AG. regulator_and_framework and sectoral_watch rest on T3 secondary sources (IAPP directory; CFATF/DataGuidance news on the Digital Assets Business Bill and AML/CFT compliance). The remaining eight modules (lawful_processing_and_special_data, data_subject_rights, controller_processor_duties, cross_border_and_adequacy, adtech_and_commercial_privacy, algorithmic_biometric_and_surveillance_governance, children_and_vulnerable_groups, enforcement_and_redress) carry zero claims and rely entirely on absent_field_provenance after multiple targeted searches for the named statute's substantive text, commencement status, and any DPA enforcement record returned only out-of-JID Caribbean comparators (Barbados draft bill, Bahamas 2003 Act, Saint Lucia 2011 Act, Curaçao/Sint Maarten ordinances) which were deliberately excluded per JID discipline.

Unresolved questions (9):

  • What is the correct instrument number/year/title of Antigua and Barbuda's data protection statute (IAPP cites 'Law No. 10-13'; no primary Gazette citation was locatable)?
  • Has the statute been brought into force in whole or in part, and if so, on what commencement date?
  • Does the Information Commissioner's office actively supervise data protection, or does it function only as an FOI/access-to-information authority?
  • What are the statutory lawful bases, consent conditions, and special-category rules?
  • What are the data-subject-rights response deadlines and extension rules?
  • What breach-notification thresholds and timelines (if any) apply to controllers?
  • What cross-border transfer mechanisms, if any, are recognised?
  • Is there any cookie/ePrivacy, direct-marketing, or ADM/biometric-specific rule in force?
  • Has the Digital Assets Business Bill 2020 received assent and a commencement/gazette date, and under what Act number does it now sit?

Escalate to primary-source review: yes