The Data Protection (Jersey) Law 2005 seeks to strike a balance between the rights of individuals and the
sometimes competing interests of those with legitimate reasons for using personal information.
The Law gives individuals certain rights regarding information held about them. It places obligations on
those who process information (data controllers) while giving rights to those who are the subject of that
data (data subjects). Personal information covers both facts and opinions about the individual.
Anyone processing personal information must notify the Data Protection Commissioner’s Office that they
are doing so, unless their processing is exempt. Notification costs £50 per year.
