Data Protection is all about personal information - any 'information relating to an identifiable living person’.
The Data Protection (Jersey) Law 2018 places obligations on you about the personal data you use in your business, organisation or charity. Organisations who use personal information need to know:
WHAT information you've got.
WHY you've got it and what you're doing with it.
WHERE you keep it.
WHO you give it to/processes it for you; and
HOW to deal with requests from data subjects.