Data Security

The Bermuda Corporate Income Tax Agency (CITA) is committed to protecting the security, confidentiality, and integrity of our website, online services and user data. We implement robust security measures to safeguard information against unauthorised access, cyber threats, and data breaches.

CITA employs industry-standard security protocols to ensure the safety of user data, including:

• Data Encryption – We use SSL (Secure Socket Layer) encryption to protect data transmitted through our website.
• Firewall Protection – Our systems are secured with firewalls and intrusion detection systems to prevent unauthorised access.
• Access Control & Authentication – Only authorised personnel have access to sensitive information, using multi-factor authentication (MFA) where applicable.
• Regular Security Audits – We conduct periodic security assessments and vulnerability testing to strengthen our defenses.
• Cyber Threat Monitoring – Our systems are monitored for suspicious activity and potential security breaches.

User Responsibilities & Safe Browsing Practices

To help maintain a secure online experience, we encourage users to:

• Use strong passwords and update them regularly.
• Avoid sharing sensitive information via email or unsecured channels.
• Verify official CITA communications and be cautious of phishing scams.
• Keep software and browsers updated to protect against vulnerabilities.

CITA will never ask for personal or financial information via unsolicited emails or phone calls. If you receive suspicious communications claiming to be from us, please report them immediately.

Data Protection & Privacy

We are committed to handling your data responsibly and in compliance with applicable laws. Please refer to our Data Privacy Notice for details on how we collect, use and safeguard your personal information.