Vanuatu

Criminalises illegal access (s 3), interception (s 4), interference with computer systems and data (s 5), misuse of devices (s 6), identity-related crime (s 9), computer-related forgery and fraud (ss 12-13) and child exploitation offences, with separate offences for critical infrastructure. It has no general cyber-incident reporting duty; service providers must prevent misuse of their networks (s 56). PacLII shows assent 20 July 2021 and commencement 22 September 2021, though s 72 ties commencement to Gazette publication.

VFSC Supervision Department guidance for financial dealers licensed under the Financial Dealers Licensing Act. Licensees keep ultimate accountability, must run due diligence and keep minimum contract terms, and must give the VFSC access to records; it does not require prior approval, and does not mention cloud computing. A Class D licence holder cannot outsource its Chief Technology Officer position.

Regulation made under the AML&CTF Act; the VFIU hosts the Consolidated Edition 2025, amended by Orders 2 and 153 of 2015 and 37 and 72 of 2017. It prescribes identification and verification requirements (cl. 3-4, 7), enhanced and ongoing due diligence (cl. 5-6, 8), record keeping (cl. 9), reporting of cash and international transfers of VT 1 million or more (cl. 12-13), compliance reports within 21 working days of a VFIU request (cl. 14A) and penalty amounts (cl. 15C, Schedule 10).

Provides for the licensing, regulation and supervision of insurance business. Section 14 requires an insurer licence, s 31(2)(c) sets minimum paid-up capital of VT30 million for insurers other than captives, s 32(3) requires written notice of a solvency failure within 30 days, and s 45(4) requires audited statements within six months of year end unless a longer period is allowed. The original text names the VFSC as regulator; the 2017 amendment moved those powers to the Reserve Bank.

Gives effect to Chapter 10 of the Constitution by setting out a Leadership Code governing the conduct of Vanuatu's leaders (enacted as Act 2 of 1998 and commenced on 7 September 1998, Consolidated Edition 2006). The Ombudsman investigates and reports on alleged breaches (s 34), police investigate criminal conduct (s 36) and the Public Prosecutor decides on prosecution (s 37).

Sets out the functions, powers, procedures and immunities of the Ombudsman, including enquiry into government agency conduct (s 11), reports to Parliament (ss 35-36) and offences for obstructing the Ombudsman (s 48). The text contains no express anti-retaliation provision for complainants or witnesses.

Principal labour law. It sets termination rules (ss 48-53), including at least three months' notice after three years' service, severance allowance of one month's remuneration per 12 months' service (ss 54-56), employment agency licensing (s 65) and a Commissioner of Labour (s 2). Section 50(2)(c) provides that a good-faith complaint or participation in proceedings against the employer is not serious misconduct. DOLES hosts Consolidated Edition 2020.