This form is ONLY for organisations to report breaches. If you are an individual and wish to raise a concern about an organisation, please click here to submit your details.
The Data Protection (Jersey) Law 2018 includes a duty on all organisations to report certain types of personal data breach to the Jersey Office of the Information Commissioner (JOIC). You must do this without undue delay, within 72 hours of becoming aware of the breach, not after investigation. Not every breach needs to be reported to our office (although you should keep a record of them). We only need to know about breaches which constitutes ”a risk” to the rights and freedoms of individuals.
Please be assured that any information you provide us with will be treated in confidence. Remember that we are here to help; we can give your advice and support during this difficult time.
Once you have a reasonable degree of certainty that a personal data breach has occurred that has led to
personal data being compromised and you think that there is a risk to an individual - notify us using the form below.
If applicable, as and when more details are discovered – please keep us updated.
Your breach notification has been submitted.
Your case reference is: . A member of the team will be in touch in due course
