The Gibraltar GDPR, read with the amended Data Protection Act 2004, takes effect today following the end of the Brexit transition period, keeping Gibraltar’s data protection standards aligned with the GDPR.
Key points
- Regulated by the Gibraltar Regulatory Authority.
- Security measures and breach notification within 72 hours are required.
- Mirrors the approach of the UK GDPR.
- Gibraltar is covered by UK adequacy regulations.
UK organisations can continue to share personal data with Gibraltar with minimal friction, but those operating there must comply with the local regime.
Source: Data protection in Gibraltar (Gibraltar Regulatory Authority)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
