Resource Room

This guidance will seek to explain what sanctions the Data Protection Authority (Jersey) Law 2018  has available in law, when the Authority may apply them and who is subject to them. The guidance will also explain how a recipient of a sanction(s) will need to handle such circumstances and what they are required to do.

The DPJL now places specific legal obligations on processors; ‘a processor is responsible for processing personal data on behalf of a controller and in accordance with the controller’s instructions’

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.