Frequently asked questions for registrations and charges

This guidance note contains the Commissioner’s guidance on registration under the DPAJL. Registration is a statutory requirement and every controller and processor must register with the Authority.

This infographic identifies whether or not you need a Data Protection Officer.

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

Good information handling makes good business sense. You'll enhance your business's reputation, increase customer and employee confidence, and by making sure personal information is accurate, relevant and safe, save both time and money.

You have the right to find out if an organisation is using or storing your personal information.

Data Protection (Jersey) Law 2018 (DPJL) requires you to put in place appropriate technical and organisational measures to implement the data protection principles and safeguard individual rights. This is ‘data protection by design and by default’.

The Freedom of Information (Jersey) Law, 2011 provides details of how scheduled public authorities (SPAs) should handle requests for information about someone who has died.