For decades, the Crown Dependencies built international businesses around trusts, funds and cross-border financial structures. Now the Isle of Man is betting that similar expertise could be applied to something very different: data.
This week the island’s new Data Asset Foundations legislation received Royal Assent, creating what it describes as the “world’s first statutory legal framework for governed data assets”.
At first glance, that sounds highly technical. In reality, the Isle of Man is attempting to position itself as a jurisdiction where organisations could eventually store, govern, share and potentially commercialise valuable datasets within recognised legal structures.
The announcement also inevitably invites comparisons with Jersey, where policymakers and industry figures have introduced ‘data trusts’. However, while the two concepts overlap, they are not quite the same thing.
What’s the difference?
The easiest way to understand the distinction is this:
Jersey has largely adapted traditional trust and governance principles for data, while the Isle of Man has created a completely new legal structure specifically designed for governed data assets.
That may sound like a subtle distinction, but it reflects two very different approaches.
Jersey’s approach: applying trust principles to data
Imagine five international banks wanting to pool fraud-detection data to train systems capable of spotting money laundering patterns more effectively. None of the banks fully trusts the others, regulators will want oversight, privacy laws become complicated and nobody wants sensitive information endlessly copied across multiple organisations.
Jersey’s ‘data trust’ style thinking would potentially place an independent governance structure in the middle, setting rules around:
- who can access the data
- what it can be used for
- how compliance is monitored
- who benefits commercially
In many respects, this borrows directly from traditional trust concepts such as stewardship, governance and fiduciary responsibility.
The attraction for Jersey is fairly obvious because these are areas where the island already has deep expertise and international credibility.
The Isle of Man’s approach: creating a new legal structure
The Isle of Man, however, appears to have concluded that data behaves too differently from traditional assets to fit comfortably into existing trust concepts alone.
Data can be copied infinitely, updated constantly, combined across borders and used simultaneously by multiple organisations, creating legal and operational complications that do not exist with more traditional assets.
Rather than adapting existing trust structures, the Isle of Man has therefore created a bespoke statutory framework called Data Asset Foundations, alongside plans for a formal Data Asset Register and supporting compliance infrastructure.
In simple terms, Jersey’s discussion has largely focused on trust-style governance principles, whereas the Isle of Man has created an actual legal vehicle specifically designed for governed datasets.
That may also explain why the Isle of Man appears to have deliberately avoided using the word ‘trust’. While trust law is well understood, the term carries very specific legal meanings internationally involving trustees, beneficiaries and fiduciary obligations. A structure called a ‘Data Asset Foundation’ may feel more operational and commercially modern to technology firms than something explicitly framed as a trust.
Could the two approaches overlap?
A Jersey-style data trust could one day sit inside an Isle of Man-style legal framework
The reality, however, may prove less clear-cut and the two models may not end up competing directly at all.
A Jersey-style data trust could theoretically even sit inside an Isle of Man-style legal framework in the future, combining fiduciary-style governance with a formal statutory structure for governed data assets.
Equally, the market itself may ultimately decide that one approach proves clearer, simpler or commercially more attractive than the other.
At this stage, much of the industry is still trying to work out what organisations will actually want, what regulators will accept and whether governed data genuinely becomes an administrable asset class in the same way as capital or funds.
Why does this matter?
The broader opportunity being pursued is clear. Organisations increasingly want ways to share data securely, demonstrate governance standards, define liability, manage access rights and potentially commercialise valuable datasets safely.
Supporters of these models would argue that the real value lies not simply in the legal structures themselves, but in independent governance.
After all, organisations are often reluctant to place sensitive shared datasets entirely under the control of a single technology company or commercial competitor. Five banks may not want one rival bank effectively governing a shared fraud-detection dataset. Hospitals may be uncomfortable allowing a major technology platform to control access to sensitive healthcare information used across multiple institutions.
The argument from jurisdictions like the Isle of Man and Jersey is that trusted third-party governance will become increasingly valuable as organisations look for neutral oversight, auditability and clear rules around how data is used.
In many ways, that plays directly to the historic strengths of the Crown Dependencies, which have spent decades building international businesses around governance, fiduciary oversight and the administration of complex cross-border structures.
The Isle of Man believes structures around governed data could eventually become part of a new international industry. That’s an ambitious goal, and one which should probably be viewed with both interest and caution.
The big unanswered question
The difficult part is not creating legislation. It’s whether anybody actually uses it
The difficult part is not creating legislation. The difficult part is whether anybody actually uses it.
The Isle of Man deserves credit for moving early and thinking creatively. In some respects, it has gone further than almost any jurisdiction in trying to create formal legal structures around data governance. However, legislation alone does not automatically create a market.
For this to become commercially significant, businesses must genuinely see value in using these structures, regulators elsewhere must recognise and trust them and organisations must believe the frameworks reduce risk more effectively than existing contracts and governance arrangements.
Whether governed data ultimately becomes a meaningful new industry or simply an interesting policy experiment remains to be seen. What is clear is that the Crown Dependencies are increasingly exploring whether their long-standing expertise in governance and international structures can be applied to the digital economy as well as finance.
You may also be interested in: ‘The next trust industry may not involve money’.
