Nassau Hosted a UN Digital Forum. The Bahamas Called the Bill a "Sovereignty Discount."

Nassau harbour, The Bahamas. Photo via Unsplash.

The United Nations does not often convene a global digital policy forum in the Caribbean. From 1 to 4 September 2026, it did: the International Telecommunication Union's seventh World Telecommunication/ICT Policy Forum ran at Nassau's Atlantis Paradise Island, hosted by the Government of The Bahamas. Prime Minister Philip Davis KC used the opening address to coin a term risk professionals should recognise even though he was not speaking to them: a "sovereignty discount", the price a small state pays, repeatedly and invisibly, for negotiating digital infrastructure from a position with few alternative suppliers. He was describing trade terms. He was also describing, exactly, the vendor concentration risk sitting underneath every AI system a Caribbean institution has deployed.

What Happened in Nassau

WTPF-26 ran across five official themes: bridging digital divides, green digital transformation, resilience of telecommunication and ICT systems, space connectivity, and ICT-centric innovation ecosystems. Artificial intelligence was not one of the forum's named pillars. That is worth stating plainly, because it means the sharpest AI-relevant statement to come out of Nassau that week arrived as a side effect of a trade and infrastructure argument, not as a governance recommendation aimed at AI systems specifically.

Davis defined the sovereignty discount in concrete terms: it shows up in the price of communications capacity, the length of service outages, contracts offered on take-it-or-leave-it terms, and technical standards written without smaller states in the room. "It is not charged once," he told delegates. "It compounds and it is invisible in the statistics we celebrate." He cited a real gap behind the rhetoric: advanced economies now draw more than 60% of their services exports from digital channels, against roughly 15% for the world's least developed countries, a split that tracks who writes the infrastructure contracts rather than who has the talent to use the technology well. Davis was careful to frame the argument as economic rather than defensive: "We are not hostile to investment. We are open, and we intend to stay open." His warning was about the terms of that openness, not its existence: "Sovereignty is very rarely taken from a nation. It is conceded, one reasonable concession at a time."

The proposals attached to that warning were specific enough to act on. Davis called for personal data to be treated as a protected national interest in trade and investment negotiations, for cross-border data transfer terms to be negotiated rather than accepted as boilerplate, for enforceable landing rights over physical infrastructure, and for a shared technical facility that pools capacity across Small Island Developing States rather than leaving each one to negotiate alone. The Bahamas has a direct stake in the diplomacy underneath these proposals: Stephen Bereaux, a Bahamian with more than two decades in telecommunications regulation and former head of the country's national regulator, is a declared candidate for ITU deputy secretary-general ahead of the organisation's Plenipotentiary Conference in Doha this November.

The Warning That Came First, From the Other Direction

Davis was not the first Bahamian official to make this case in 2026. At CANTO's 41st Annual Conference and Trade Exhibition in Punta Cana, held 9 to 12 August, Bahamian Minister of Economic Affairs Jerome Fitzgerald delivered a harder-edged version of the same argument, and named artificial intelligence directly. "Digital consumption is not digital sovereignty," he told delegates. "Connectivity is not capability." His central image was a property metaphor aimed squarely at the region's dependence on foreign cloud and platform infrastructure: "We occupy the house. We pay for the house. We may even have built the house. But someone else holds the keys."

Fitzgerald's proposal was more specific than a trade posture. He called for the development of a Caribbean AI laboratory, owned by the region, trained on Caribbean languages, archives and history, running on computing infrastructure under regional control, and argued that the region's fragmentation is itself the weakness: "Alone, each island approaches a platform as a customer. Together, we approach it as a market." His warning about where unmanaged dependence leads was the sharpest line either minister delivered this year: "The next colonial office may have no building in our capital. It may exist in a platform's terms of service."

Why "Sovereignty Discount" Is a Vendor Risk Line, Not a Trade Statistic

Read a trade speech as a trade speech and it stays a trade speech. Read it as a description of the infrastructure an AI system actually runs on, and the sovereignty discount becomes a line item a risk committee can quantify. Every production AI system a Caribbean bank, insurer, or government agency operates sits on someone's cloud, trains on or calls out to someone's model weights, and moves data across a border to do it. The contract governing that arrangement was very likely negotiated on the vendor's standard terms, in the vendor's jurisdiction, with no landing-rights clause, no enforceable data transfer schedule, and no exit provision that survives a repricing decision made in a market the institution has no seat in. That is the sovereignty discount, priced into a specific vendor relationship rather than a national balance of trade.

CAIRMC's own work already gives this exposure a name and a place in a risk register. The Caribbean AI Risk Taxonomy classifies undisclosed foreign model dependency and unmapped data residency as third-party and model-provenance risk, rated against the CAIRMC AI Risk Tiers according to what data crosses the border: internal, non-personal data sits at a lower tier, while personal data, financial account information, or health data pushes the same arrangement into a tier that requires board-level reporting. CAIRMC has previously published a working register for institutions to test their own AI vendor contracts against exactly this exposure, built around a simple diagnostic: can the institution name, and evidence, the jurisdiction where its AI system actually executes, or only the jurisdiction where the sales conversation happened.

What Nassau Did Not Create: A Binding Obligation

Nothing in WTPF-26's outcomes, and nothing in Fitzgerald's CANTO address, creates a new legal requirement for a Caribbean institution. The ITU is a specialised UN agency, and a policy forum is a forum: it produces recommendations and diplomatic momentum, not enforceable rules, and the Doha Plenipotentiary Conference in November will set ITU strategy rather than regional AI law. The instruments that already bind a Caribbean institution today are the ones that predate this week's speeches: the Jamaica Data Protection Act 2020, the Barbados Data Protection Act 2019, and the data protection statutes of Trinidad and Tobago, the Cayman Islands, and Guyana, each of which already constrains where personal data can move and under what safeguards, regardless of whether a CARICOM-wide AI law or a shared SIDS technical facility ever materialises. A risk committee should read Nassau as a signal of where regional appetite is heading, not as a new compliance deadline. The two are easy to conflate, and only one of them changes what an auditor will ask to see this quarter.

What Caribbean Risk Committees Should Do This Quarter

Four actions follow directly from reading both speeches as vendor risk description rather than trade rhetoric. First, add a sovereignty discount line to AI vendor due diligence: for each material AI system, record the jurisdiction of execution, the sub-processor chain, and whether the contract includes an enforceable data transfer schedule or only a vendor assurance. Second, price the switching cost explicitly. A contract with no negotiated exit or data portability clause is not free just because no invoice says so; it is a cost deferred to the day the vendor changes its pricing or its terms of service, and Davis's own framing, that the discount "compounds and is invisible in the statistics we celebrate," applies as precisely to a single AI vendor contract as to a national trade balance. Third, treat landing rights and cross-border transfer terms as negotiable, not boilerplate, the same posture Davis urged at the national level; an institution large enough to matter to a vendor has more leverage on these terms than it typically exercises. Fourth, watch the two regional proposals, a shared SIDS technical facility and a regionally owned Caribbean AI laboratory, as options worth tracking rather than reasons to defer today's vendor review; neither exists yet, and an institution's current AI contracts will still be in force whenever, or if, either one does.

CAIRMC's Caribbean AI Risk Assessment methodology and its published vendor-provenance register already give an institution a way to run this diagnostic today rather than wait for regional infrastructure to catch up with regional rhetoric. The gap Davis and Fitzgerald described in successive weeks, one from a podium at a UN forum, one from a podium at a telecoms trade conference, is the same gap our own standard was built to close: a Caribbean institution's ability to state, and evidence, where its AI systems actually run.

Frequently Asked Questions

What is WTPF-26 and why does it matter for AI risk in the Caribbean?

WTPF-26 is the International Telecommunication Union's seventh World Telecommunication/ICT Policy Forum, hosted by the Government of The Bahamas in Nassau from 1 to 4 September 2026. Artificial intelligence was not an official theme, but Prime Minister Philip Davis's opening address on digital infrastructure dependence describes, without naming it, the vendor concentration risk underneath every AI system a Caribbean institution runs on foreign-owned cloud and model infrastructure.

What did Prime Minister Davis mean by "sovereignty discount"?

The compounding cost a small state pays when it negotiates digital infrastructure, data hosting, or connectivity agreements from a position with few alternative suppliers. Davis said it shows up in the price of communications capacity, outage duration, take-it-or-leave-it contract terms, and technical standards developed without smaller states involved, and that it "compounds" and is "invisible in the statistics we celebrate."

Does anything from WTPF-26 create a binding legal obligation for Caribbean institutions?

No. The ITU is a UN specialised agency and WTPF-26 produced recommendations and diplomatic momentum, not enforceable rules. The instruments that already bind a Caribbean institution are the existing national data protection statutes, such as the Jamaica Data Protection Act 2020 and the Barbados Data Protection Act 2019, which apply regardless of whether a shared regional AI framework is ever adopted.

How is the sovereignty discount different from a normal cloud vendor cost?

A normal vendor cost is priced and visible on an invoice. The sovereignty discount is the unpriced exposure sitting behind it: the switching cost of a contract with no data portability clause, the pricing risk of a vendor relationship negotiated with no alternative supplier, and the jurisdiction risk of not knowing, and not having evidenced, where an AI system's data actually executes.

What did Minister Fitzgerald propose at CANTO, and how does it relate to Davis's speech?

At CANTO's 41st Annual Conference in Punta Cana in August 2026, Bahamian Minister of Economic Affairs Jerome Fitzgerald called for a regionally owned Caribbean AI laboratory, trained on Caribbean languages and archives, running on infrastructure the region controls. It is a proposed remedy to the same dependence Davis later described at WTPF-26 as a sovereignty discount: Fitzgerald named the exposure from the AI-infrastructure side, Davis from the trade and connectivity side.

What should a Caribbean risk committee do this quarter?

Add a sovereignty discount line to AI vendor due diligence that records execution jurisdiction, sub-processor chain, and the presence or absence of an enforceable data transfer and exit clause; price the switching cost of contracts that currently have none; and treat landing rights and transfer terms as negotiable rather than accepted as standard. None of this requires waiting for a regional facility or laboratory that does not yet exist.

How does this connect to CAIRMC's existing work?

CAIRMC's Caribbean AI Risk Taxonomy already classifies undisclosed foreign model dependency and unmapped data residency as third-party and model-provenance risk, tiered by the sensitivity of the data involved, and CAIRMC has previously published a working vendor-provenance register institutions can apply directly. Nassau gave the exposure a political name. The taxonomy and register already gave it a control.

A prime minister does not usually hand a Caribbean risk committee a working definition for a line item it has not written down. Philip Davis did, from a podium in his own capital, describing a cost every institution running an AI system on foreign infrastructure is already paying without a name for it. Jerome Fitzgerald described the same exposure three weeks earlier from a different stage, with a harder edge and a concrete remedy attached. Neither speech was AI governance. Both were accurate about the AI governance problem, which is now a matter of whether Caribbean institutions write the sovereignty discount into a vendor contract before the next repricing decision writes it into a budget instead.

Related reading across the Caribbean AI network

This article sits alongside ongoing coverage of AI governance, risk, and company-building across the region. For related perspectives:

• StarApple AI, the first AI company founded in the Caribbean, founded in 2018 by Adrian Dunkley
• Caribbean AI Association, whose President is Adrian Dunkley
• Trinidad and Tobago AI, tracking AI adoption and policy in one of the jurisdictions named in CAIRMC's third-party risk mapping