The DPA applies to any persons established in the BVI, and persons not established in BVI but who use equipment in the BVI to process personal data, otherwise than for the purpose of transit through the BVI. For these purposes, all entities incorporated in the BVI will be treated as "established in the BVI", alongside partnerships and other incorporated entities formed under BVI laws, persons who are physically in the BVI for 180 or more days in any year, and persons who maintain an office, branch agency or regular professional practice in the BVI. The DPA will restrict data controllers from transferring personal data outside of the BVI without adequate safeguards or consent from the subject. 4.3 Please briefly describe the sanctions that apply for failing to comply with your data privacy laws.