Sole traders / Organisations / Business / Charities

Find out about the Data Protection (Jersey) Law 2018 and how to comply with it.

Who is this for?

The Data Protection (Jersey) Law 2018 covers all Jersey businesses and organisations (including sole traders to larger companies, charities, social clubs and Government of Jersey)

Do I need to register?

If you collect or process any personal information (e.g. staff, customer, tenant or member’s personal information) you must register with us.

Do I need to register?

Report a data breach

You must report certain types of personal data breaches to us, within 72 hours of becoming aware of it.

What constitutes a data breach?

Submit a Data Protection Impact Assessment

You must submit your DPIA for consultation with us for “high risk” processing and where you have not been able to mitigate (manage) the risks. You must do this before you start any processing activity.

DPIA guidance