Last updated: 12 March 2026
ADDITIONAL BERMUDA-SPECIFIC PRIVACY DISCLOSURES
EY Bermuda Ltd., a Bermudan local company, and its affiliated and/or associated entities (together, “EY Bermuda,” “we,” “us,” “our”) provide this privacy addendum (“Privacy Addendum”) to inform you about our collection, use and disclosure of information when individuals (“you”) visit www.ey.com and select Bermuda as your country (the “Site”) and any other sites that link to this Privacy Addendum.
This Privacy Addendum contains additional disclosures required by the Personal Information Protection Act 2016 and any amendments thereof (“PIPA”). The Bermuda disclosures supplement the information contained in our global privacy statement available here Privacy statement | EY - Global (“Global Privacy Statement”). For purposes of this addendum and the Global Privacy Statement, the term “personal data” includes all “personal information” and “sensitive personal information” as defined under PIPA. Unless otherwise expressly stated, all other terms in this section have the same meaning as defined in our Global Privacy Statement or as otherwise defined in PIPA.
Protecting your data
EY Bermuda protects personal data using appropriate physical, technical, contractual and organizational security measures. These measures are designed to facilitate compliance with data protection requirements by design and by default.
Purpose for which personal information is or might be used
Your personal data is collected, used and disclosed to fulfill the purposes described in the Global Privacy Statement and this Privacy Addendum (the “Purpose”).
Contact for more information
EY Bermuda has appointed a privacy officer who is responsible for overseeing questions in relation to this Privacy Addendum. If you have any questions about this Privacy Addendum, including exercising your rights under PIPA, you may follow the prescriptions of Part 3 of PIPA, and EY Bermuda will correspondingly comply with the procedures and practices prescribed by section 17 (Access to personal information) and 19 (Rectification, blocking, erasure and destruction) of Part 3 of PIPA:
Privacy Officer
EY Bermuda Ltd.
3 Bermudiana Road
Hamilton, HM Bermuda
bbcdataprotection@ky.ey.com
We would encourage you to contact the Privacy Officer to address any of your privacy concerns; however, you also have the right to make a complaint at any time to the relevant supervisory authority for personal data protection issues. In Bermuda, you can contact the Office of the Privacy Commissioner for Bermuda.
Access to personal data
Individuals have the right to request access to personal data. We can refuse to provide access to personal data if:
- The personal data is protected by legal privilege.
- The disclosure would reveal confidential information about EY or a third party.
- The personal data is being used for current disciplinary or criminal investigation or legal proceedings, and refusal does not prejudice the right of the individual to receive a fair hearing.
- The personal data was used by a mediator or arbitrator, or was created in the conduct of a mediation or arbitration for which the mediator or arbitrator was appointed to act under an agreement or by a court.
- Disclosure would reveal the intentions of the organization in relation to any negotiations with the individual to the extent that the provision of access would be likely to prejudice those negotiations.
- Disclosure of the personal information could reasonably be expected to threaten the life or security of an individual.
- Personal data would reveal personal data about another individual.
Rectification, blocking, erasure and destruction
- You may make a written request to EY to correct an error or omission in any personal information held in our custody.
- If there is an error or omission in personal information in respect of which a request for a correction is received by EY:
- It must comply with the request in a timely manner.
- Where EY has disclosed the incorrect information to other organizations, it must notify those organizations of the correction.
- On receiving notification containing corrected personal information, EY shall correct the personal information.
- EY shall obtain the consent of the writer of an opinion before making any corrections to that opinion.
- If consent is not provided, EY is required to document the contents of the individual’s written request to change any error or omission in the opinion in a manner that links that request with that opinion.
- You may request EY to cease, or not to begin, using personal information for the purposes of advertising, marketing or public relations.
At your request, we will securely delete your personal data in accordance with applicable procedures, unless EY Bermuda is required to retain it to comply with its obligations.
Allowing and removing consent
You may request the following in relation to your personal information:
- EY to cease, or not begin, using personal information for the purposes of advertising, marketing or public relations
- EY to cease, or not to begin, using personal information where the use of that personal information is causing or is likely to cause substantial damage or distress to themselves or others
- EY to stop or refrain from using the personal information that you have identified in the request or provide you with written justification for continuing its use
- EY to erase or destroy personal information about you where that personal information is no longer relevant for the purposes of its use
- EY to erase or destroy the personal information specified by you in your request or provide you with justification for retaining that information
Changes to the Privacy Addendum
EY Bermuda will occasionally update this Privacy Addendum to reflect additional disclosures, where required. When we post changes to this Privacy Addendum, we will revise the “Last Updated” date at the top of this Privacy Addendum. We recommend that you check this page from time to time to inform yourself of any changes in this Privacy Addendum.
EY Bermuda reserves all of its rights and protections afforded to it under PIPA.
