The Data Protection (Bailiwick of Guernsey) Law 2017 comes into force today, on the same day as the EU GDPR, giving the Bailiwick a modern regime designed to be equivalent to the GDPR and to preserve its adequacy status.
Key points
- Regulated by the Office of the Data Protection Authority (ODPA).
- Appropriate security measures are required.
- Breaches must be notified to the ODPA within 72 hours.
- Controllers and processors must register with the regulator.
UK organisations using Guernsey-based service providers, funds or administrators should ensure their contracts and incident procedures reflect the local law, including the ODPA’s notification deadline.
Source: Data Protection (Bailiwick of Guernsey) Law, 2017 (Guernsey Legal Resources)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
