Gibraltar & Crown Dependencies
AI Governance Tracker
The only dedicated monitor for AI regulatory developments in Gibraltar, the Crown Dependencies, and their relationship with UK and EU frameworks.
The Gibraltar AI Regulatory Observatory tracks AI governance developments specific to Gibraltar, the Crown Dependencies, and their relationship with UK and EU frameworks. No other publication covers this jurisdiction in depth.
Gibraltar’s regulatory position — outside the EU but maintaining close alignment with UK frameworks, with a sophisticated financial services sector and first-mover DLT regulation — makes it a natural testbed for AI governance in regulated financial services. The GFSC has not yet published dedicated AI guidance, but existing governance expectations (fitness/propriety, systems/controls, senior manager accountability) already apply to AI systems in regulated use. Ramparts monitors GFSC communications, GRA guidance, HM Treasury consultations affecting British Overseas Territories, and GFSC-JFSC-IoMFSA coordination for AI governance signals.
Gibraltar — Regulatory Position
Gibraltar is outside the EU single market post-Brexit. EU AI Act does not directly apply — however, firms operating in EU markets from Gibraltar face EU AI Act obligations as deployers.
Gibraltar Financial Services Commission (GFSC)
Primary regulator for financial services firms using AI for trading, advice, and compliance. No dedicated AI framework yet — supervises AI risk under existing governance and risk management obligations.
↗ www.gfsc.giGibraltar Regulatory Authority (GRA)
Regulates electronic communications, data protection (GDPR-equivalent), and digital economy. Data protection obligations directly affect AI training and deployment.
↗ www.gra.giEU AI Act — Extraterritorial Reach
The EU AI Act does not directly apply in Gibraltar, but Gibraltar firms deploying AI systems to EU-market users or within EU-regulated entities face EU AI Act obligations as deployers. This is the primary cross-border compliance exposure for Gibraltar’s financial sector.
↗ Latest EU AI Act statusUK AI Framework — Indirect Application
Gibraltar maintains close alignment with UK financial services frameworks. UK FCA and PRA supervisory expectations on AI governance (model risk, explainability, fairness) apply to Gibraltar firms operating in UK markets or under UK regulatory equivalence arrangements.
↗ FCA AI UpdateGibraltar AI Governance Baseline
| Instrument | Status | AI Relevance | Source |
|---|---|---|---|
| Data Protection Act 2004 (as amended) | In force | GDPR-equivalent framework. Applies to all AI systems processing personal data of Gibraltar residents. No AI-specific amendments yet. | ↗ Source |
| Financial Services Act 2019 | In force | Primary financial services regulatory framework. AI systems used in regulated financial services (trading, advice, compliance) fall within its scope via existing fitness/propriety and governance obligations. | ↗ Source |
| DLT Provider Regulations 2018 (as amended 2023) | In force | Gibraltar is the first jurisdiction globally to regulate DLT/blockchain at statutory level. AI-DLT intersections (autonomous trading agents, smart contract AI) fall within both DLT and financial services frameworks. | ↗ Source |
| Dedicated Gibraltar AI Framework | Not yet enacted | No dedicated AI statute or binding guidance from GFSC or GRA as of March 2026. Existing governance frameworks apply. Ramparts monitors GFSC communications for signals of upcoming guidance. | — |
Jersey · Guernsey · Isle of Man
Gibraltar is not a Crown Dependency (Jersey, Guernsey, IoM) but shares structural similarities as a British Overseas Territory with its own regulatory regime. Developments in Crown Dependency AI governance provide useful comparative reference.
Jersey
ActiveJersey Financial Services Commission (JFSC) published AI guidance for regulated firms in Q4 2025. Principles-based approach aligned with UK FCA’s emerging framework.
↗ www.jerseyfsc.orgIsle of Man
ActiveIoM FSA has indicated AI governance will be integrated into existing risk management supervisory expectations in 2026. No standalone AI framework.
↗ www.iomfsa.imGuernsey
WatchGuernsey Financial Services Commission has not yet published AI-specific guidance. Data protection framework (Data Protection (Bailiwick of Guernsey) Law 2017, GDPR-equivalent) applies to AI data processing. Monitoring for 2026 guidance signals.
↗ GFSC GuernseyRecent Developments
No Gibraltar-specific AI regulatory developments this week. Standing framework applies. See UK section (Module 8) for Copyright & AI Report — directly relevant to Gibraltar firms operating under UK IP framework.
Contribute to the Observatory
If you are a Gibraltar practitioner, regulator, or academic with a development to flag — GFSC guidance, court proceedings, parliamentary questions, or policy consultations — contact the editorial team.
observatory@ramparts.giPublished weekly as part of the Ramparts AI Frontier Monitor