The Isle of Man passed the Foundations (Amendment) Bill 2025 on April 7th to establish a statutory framework for Data Asset Foundations (DAFs). The legislation places the Isle of Man at the forefront of the global data economy, opening access to new commercial opportunities and enabling companies to explore how they share, use, and harness data. If executed well, the Isle of Man isn’t just implementing a piece of legislation; it’s trying to build an entire data economy.

‍

Initiated by Digital Isle of Man, the framework defines data as a legally governed and managed asset, creating a unique and forward-looking proposition for data-driven businesses both on the Island and internationally to drive economic growth in a new area within a robust and trusted environment.

‍

This framework has established the legal and operational infrastructure required for the monetisation and controlled use of data, enabling companies to securely pool data, license it, use it as collateral, or even recognise it on balance sheets, all while ensuring governance, transparency, and trust.

‍

‍

How will the Isle of Man maintain privacy?

Crucially, the legislation goes beyond commercialisation by embedding privacy and security at its core. Data Asset Foundations are required to operate within strict governance frameworks, ensuring that data is access-controlled, purpose-limited, and compliant with international data protection standards.

‍

By aligning with GDPR-equivalent regulations and maintaining “adequate” status for international data transfers, the Isle of Man ensures that innovation does not come at the expense of individual rights or data protection. This balance between utility and responsibility is key to building long-term trust in the data economy.

‍

In practice, this means organisations can structure data ownership and usage more effectively. For example, multiple organisations can contribute datasets into a shared foundation, enabling collaboration without relinquishing control. Sensitive data can be tokenised, anonymised, or permissioned, enabling its commercial use while protecting privacy. And data can be governed independently from the originating business, reducing risk and enabling clear audit trails and accountability.

‍

‍

A pioneer in regulated sectors

This legal clarity unlocks entirely new use cases across sectors such as fintech, healthcare, AI, and iGaming, industries where secure data sharing and compliance are critical. As a recognised digital hub, known for its strong regulatory frameworks in iGaming, fintech, and medicinal cannabis, the Isle of Man is now extending that reputation into the data sector, supporting organisations to operate confidently and competitively in global markets.

‍

‍

What value does data have to offer?

Data remains the most important yet underutilised asset of the 21st century due to its ability to compound, scale, and power smarter decisions. While businesses collect vast amounts of data from customers, operations, and digital platforms, much of it remains siloed, poorly structured, or disconnected from decision-making.

‍

The true value of data lies not in its volume, but in how effectively it is translated into insight and action, fueling everything from AI systems to personalised customer experiences. In 2026, the conversation has shifted from “big data” to “usable data.” Having data is no longer a competitive advantage, activating it in real time is. With the rapid expansion of AI, the differentiator is now proprietary, high-quality, and well-governed data. Organisations leading the way are those turning internal data into continuous feedback loops that inform strategy, marketing, and product development.

‍

‍

What comes next for the Isle of Man now the legislation has passed?

Passing the legislation is really just the starting point. What comes next for the Isle of Man is about execution, adoption, and global positioning. The real next step will be proving real-world adoption of data asset foundations, including setting up the foundation and demonstrating use cases. Whether its data sharing, licensing or monetisation, if these early examples succeed, they become powerful case studies that validate the model globally.

‍

The Island will need to focus on building a supporting ecosystem to ensure it has sufficient infrastructure to support the sector. Legal and corporate service providers specialising in DAF structures will be required support businesses with regulatory oversight and governance. Cybersecurity expertise and technology platforms will also be essential to secure data sharing, tokenisation, and auditability.

‍

The Isle of Man plans to position itself as a jurisdiction of choice for data-rich companies, similar to how it has done with iGaming and fintech. Attracting these types of companies, such as AI companies, multinationals or firms operating in regulated sectors, will be key to drive growth in the sector. For this to scale, the Isle of Man also needs to gain global trust by maintaining and strengthening GDPR adequacy status, building partnerships with other jurisdictions and regulators, and aligning with evolving global standards around AI, data ethics, and cross-border data flows.

‍

The biggest shift will also be behavioural. The Isle of Man is signalling that data should be treated as a core business asset, not a byproduct. Organisations need to move from compliance-only thinking to value creation thinking, and decision-making should increasingly be driven by structured, governed data.

‍

‍

Summary

The Isle of Man’s Data Asset Foundations framework represents a significant shift in how data is treated globally. By combining strong privacy protections, robust security frameworks, and clear legal ownership structures, the legislation enables organisations to unlock the commercial value of data without compromising trust. In a world where competitive advantage is increasingly defined by how quickly and effectively companies can act on data, the Isle of Man is not just recognising data’s value, it is creating the conditions for it to be safely, securely, and strategically realised.

‍

"This legislation marks a significant evolution in how data is recognised and governed globally. By establishing Data Asset Foundations, the Isle of Man is not only enabling organisations to unlock the commercial value of their data, but doing so within a framework that prioritises privacy, security, and trust. For businesses, it creates clarity and confidence, positioning the Island as a credible and forward-thinking jurisdiction for the data economy.” - Colin Quayle, Director (Isle of Man), Company Secretary and Data Protection Officer.

‍

Affinity

As a regulated Corporate Service Provider in the Isle of Man, we work closely with businesses across the fintech, igaming, and digital sectors. We provide bespoke consultancy, corporate services and licensing in the Isle of Man. As experts in governance, compliance and regulation, we are well placed to support your business interests in the Isle of Man.

‍

If you would like to learn more the Data Asset Foundations (DAFs) framework, or you are interested in setting up a company in the Isle of Man, feel free to speak to our team. Simply email us at info@affinityco.com or arrange a call with directly with our CCO, Gary Harrison. (gary@affinityco.com)