Skip to main content

    AI by country · Oceania

    AI in Fiji: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Fiji know before starting with AI?

    Fiji has no dedicated AI law and no comprehensive data protection act as of 29 October 2026. Cabinet endorsed a National Privacy and Personal Data Protection Policy in 2025, and a data protection law aligned to Convention 108+ is being prepared. Until it passes, a company should follow the constitutional right to privacy, any sector rules such as the Reserve Bank of Fiji's cybersecurity policy, and the principles the new law is likely to bring.

    At a glance

    Fiji at a glance

    Key facts about Fiji
    Data protection lawNo comprehensive data protection act as of 29 October 2026. A law aligned to Convention 108+ is in preparation
    RegulatorNo dedicated data protection regulator yet. The Ministry of Policing and Communications leads digital policy; the Reserve Bank of Fiji supervises financial institutions
    AI policyNational Digital Strategy 2025 to 2030, with a National AI Framework planned. No AI law as of 29 October 2026
    Time zoneFJT, UTC+12, no daylight saving (6.5 hours ahead of India)
    CurrencyFJD (Fijian dollar)
    Business languageEnglish, iTaukei and Fiji Hindi

    Why now

    Why Fiji is worth watching

    Each point links to the document it comes from.

    • In August 2026 the Minister for Policing and Communications told Parliament that a data protection law aligned to Convention 108+ is progressing.[1]

    • Cabinet endorsed a National Privacy and Personal Data Protection Policy in 2025, and the Minister told Parliament it rests on eight data protection principles.[1]

    • The government has said a National AI Framework is part of the next phase of its National Digital Strategy 2025 to 2030.[5]

    • A press report on the strategy says its 2030 targets include 80 per cent of key government services online and 80 per cent digital inclusion, with an AI framework planned for 2027.[6]

    • The Minister reported that 5G is being rolled out and a national CERT has been set up to help organisations recover from cyber incidents.[1]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Constitution of the Republic of Fiji (2013), section 24: right to privacy

    In force2013Every person has the right to personal privacy, including confidentiality of their personal information and communications. The right can be limited by law only as far as necessary. With no data protection act yet, this is the main general privacy protection.[2]

    National Privacy and Personal Data Protection Policy

    In force2025This is a government policy, not a law, so it does not create duties a court can enforce. It covers safeguards for sensitive and personal data and stronger protection for children's data, and it sets the base for a future act. We could not read the policy text itself.[4]

    Data protection law aligned to Convention 108+

    Draft2026The government told Parliament in August 2026 that this law is progressing. We found no published bill, so its content and timing are unclear as of 29 October 2026. Convention 108+ alignment suggests rules on lawful processing, data subject rights and cross-border transfers.[1]

    Reserve Bank of Fiji Prudential Supervision Policy Statement No. 2: Cybersecurity Risk

    In force2023Banks, insurers, the FNPF and other supervised entities must keep a cybersecurity risk framework. Third-party services, such as cloud AI tools, must not weaken their controls, and contracts must let the Reserve Bank review the provider. A cyber incident that materially affects the entity must be reported to the Reserve Bank within 24 hours.[3]

    Where AI fits first

    Where AI fits first

    Banking and insurance

    Claims and loan document processing and customer service chatbots, with staff making final decisions.

    The Reserve Bank's cybersecurity policy requires due diligence on third-party providers and a 24 hour incident report. We found no AI-specific guidance from the Reserve Bank.[3]

    Tourism and hospitality

    Booking assistants and replies to guest messages in several languages.

    No AI-specific rule applies. Guest data still falls under the constitutional right to privacy, and the coming data protection law may add consent and transfer rules.[2]

    Government services and suppliers

    Search and summarisation over forms and records as more services move online.

    The National Digital Strategy aims to put key government services online and plans a national digital ID.[1]

    Your first steps

    Your first steps

    1. Write down what personal data your AI uses, where it comes from and where it is stored.
    2. Adopt basic data protection principles now, such as purpose limits, consent and security, so you are ready when the new law passes.
    3. Check where your AI vendor stores data, as cross-border rules are likely under a Convention 108+ aligned law.
    4. If you are supervised by the Reserve Bank, run third-party due diligence on AI vendors and add review rights to contracts.
    5. Prepare an incident process, including the Reserve Bank's 24 hour report if it applies to you.
    6. Keep a person reviewing AI outputs that affect customers.
    7. Watch for the data protection bill and the National AI Framework and plan to review your setup when they appear.

    AI services for Fiji

    AI consulting and development for teams in Fiji

    We work remotely with companies in Fiji, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Fiji is on UTC+12 with no daylight saving, and India is on UTC+5:30, so Fiji is 6.5 hours ahead. Taking a 9:00 to 17:00 day in Fiji and 9:30 to 18:30 in India, the overlap is only about 1 hour, from 16:00 to 17:00 Fiji time. We agree that hour, or a slightly longer window, for calls and handle the rest in writing, so your questions from the afternoon are answered by your next morning.

    Questions

    Common questions about AI in Fiji

    Does Fiji have a data protection law?

    Not a comprehensive one as of 29 October 2026. The Constitution protects privacy, Cabinet endorsed a privacy policy in 2025, and the government says a data protection law aligned to Convention 108+ is progressing.

    Is there an AI law or policy?

    There is no AI law. The government has said a National AI Framework is part of the next phase of the National Digital Strategy 2025 to 2030, and a press report puts it in 2027.

    We are a bank. What applies to our AI vendors?

    The Reserve Bank of Fiji's Policy Statement No. 2 on cybersecurity requires due diligence on third parties, service agreements with cybersecurity terms and the Reserve Bank's right to review providers. Material cyber incidents must be reported within 24 hours.

    Should we wait for the law before using AI?

    No need to wait, but build with the law in mind. Keeping records of data use, getting consent and checking where data is stored now will make the change easier.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Parliament of the Republic of Fiji, 2026-08-20. Daily Hansard, Thursday 20th August 2026: Ministerial Statement, Update…(parliament.gov.fj)
      Full title and what we used it for

      Daily Hansard, Thursday 20th August 2026: Ministerial Statement, Update on Government's Digital Transformation. Primary. Used for the privacy policy's eight principles, the Convention 108+ aligned law, CERT, 5G, the National Digital Strategy 2025 to 2030 and the digital ID.

    2. [2] Constitute Project, 2026-10-29. Fiji's Constitution of 2013(constituteproject.org)
      Full title and what we used it for

      Fiji's Constitution of 2013. Text of the Constitution, used for section 24 on the right to privacy. The government laws site did not load for us.

    3. [3] Reserve Bank of Fiji, 2023-03-03. Prudential Supervision Policy Statement No. 2: Minimum Requirements for…(rbf.gov.fj)
      Full title and what we used it for

      Prudential Supervision Policy Statement No. 2: Minimum Requirements for the Management of Cybersecurity Risk by Supervised Entities. Primary. Read in full text. Used for who it applies to, third-party rules (section 13) and the 24 hour incident report (section 17).

    4. [4] Fijivillage, 2025-10-11. National privacy and personal data protection policy to safeguard data…(fijivillage.com)
      Full title and what we used it for

      National privacy and personal data protection policy to safeguard data protection endorsed by Cabinet. Press report. Used for the Cabinet endorsement, the policy's scope and the plan to join Convention 108+. The government website refused connections, so we could not read the policy or Cabinet decision.

    5. [5] FBC News, 2025-10-30. Cybersecurity and AI drive Fiji's digital leap(fbcnews.com.fj)
      Full title and what we used it for

      Cybersecurity and AI drive Fiji's digital leap. Press report of ministry remarks. Used for the National AI Framework as part of the next phase of the National Digital Strategy.

    6. [6] The Fiji Times, 2025-05-31. Beyond the scope: Fiji's digital strategy(fijitimes.com.fj)
      Full title and what we used it for

      Beyond the scope: Fiji's digital strategy. Opinion column summarising the National Digital Strategy 2025 to 2030. Used for the 2030 targets and the 2027 AI framework date. We could not open the strategy itself.

    7. [7] timeanddate.com, 2026-10-29. Daylight Saving Time Changes in Fiji(timeanddate.com)
      Full title and what we used it for

      Daylight Saving Time Changes in Fiji. Used to confirm Fiji stays on UTC+12 all year, with no daylight saving since January 2021.

    This is general information, not legal advice. Fiji's data protection law is still being prepared, and several points rest on press reports because government sites did not load for us. Check with a qualified Fijian lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Fiji?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score