Company: NBRG
Filing Date: 2025-06-24
Form Type: DRS/A
Source: 0001213900-25-056981
Chunk: 286

Company: Newbridge Acquisition Ltd
Filing Date: 2025-06-24
Form: DRS/A
Chunk 286
---
 purposes, we may refuse to accept the application, in which case any funds received will be returned without interest to the account from which they were originally debited. If any person resident in the British Virgin Islands knows or suspects that another person is engaged in money laundering or terrorist financing and the information for that knowledge or suspicion came to their attention in the course of their business the person will be required to report his belief or suspicion to the Financial Investigation Agency of the British Virgin Islands, pursuant to the Proceeds of Criminal Conduct Act 1997 (as amended). Such a report shall not be treated as a breach of confidence or of any restriction upon the disclosure of information imposed by any enactment or otherwise. 173 DATA PROTECTION — BRITISH VIRGIN ISLANDS The Data Protection Act, 2021 (the “BVI DPA”) came into force in the British Virgin Islands on 9 July 2021. The BVI DPA establishes a framework of rights and duties designed to safeguard individuals’ personal data, balanced against the need of public authorities, businesses and organizations to collect and use personal data for lawful purposes. The BVI DPA is centered around seven data protection principles (the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Protection Principle and the Access Principle) which require that: •personal data must not be processed without consent unless specific conditions are met and must not be transferred outside the British Virgin Islands, unless there is proof of adequate data protection safeguards or consent from the data subject; •Where consent has been given to processing of personal data, the data subject may at any time withdraw his or her consent; •a data controller must inform a data subject of specific matters, for instance the purposes for which it is being collected and further processed; •personal data must not be disclosed for any purpose other than the purpose for which it was to be disclosed at the time of collection or a purpose directly related thereto or to any party other than a third party of a class previously notified to the data subject; •a data controller shall, when processing personal data, take practical steps to protect personal data from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction; •personal data must not be kept for longer than is necessary for the purpose; •personal data must be accurate, complete, not misleading and kept up to date; and •a data subject must be given access to his or her own personal data and be able to correct that data