| Department | Department for the Economy |
|---|
| Start date | 04/03/2024 |
|---|
| End date | 23/04/2024 |
|---|
| Type of consultation | White paper |
|---|
| Deadline for comments | 23/04/2024 |
|---|
About the consultation
The Operator of an Essential Service (OES) is defined as any service which is essential for the infrastructure of Jersey or the maintenance of critical societal or economic activities in Jersey.
This consultation asks for your views on the proposed sectors and sub-sectors which will be defined as OESs, and the requirements which will be placed upon them, under the
draft Cyber Security (Jersey) Law 202-.
Consultation: Draft Cyber Security (Jersey) Law 202-
Background
The
Jersey Cyber Security Centre (JCSC) is responsible for promoting and improving the cyber resilience across the Island’s critical national infrastructure, business communities and citizens to reduce the risk and impact of major cyber incidents in Jersey.
Since 2021, it has operated within the Department for the Economy, and has been funded as part of the Government Plan. The intention is for the JCSC to operate as a grant funded body at arm’s length from regulators, law enforcement officers and government.
In order to establish it as an arm’s length corporation sole, legislation needs to be put in place outlining the scope of the work expected of the JCSC and the associated governance, which includes defining OES and the legal requirements placed upon them.
OES will be defined in the law, but the proposed list includes:
- Energy
- Transport, sea transport, freight handling, road transport and freight distribution
- Banking and financial services
- Health including Government of Jersey services
- Water providers
- Digital Infrastructure
- Postal and Courier services
- Food
- Public Administration
The consultation process
A
consultation on proposed cyber defence legislation, which an from December 2022 to January 2023 provided feedback that directly fed into the drafting instructions and law drafting process.
This consultation focuses on obtaining feedback from Operators of Essential Services.
A third consultation, planned for Q3 2024, will focus on how OESs implement what will be required of them when Part 4, Part 5, and Schedule 3 are implemented.
Public meeting dates
Operators of Essential Services will be able to attend workshops which will explain how they can implement the requirements of the law when Part 4, Part 5, and Schedule 3 are implemented.
These workshops will take place in Q4 2024, and more details will be available
via the JCSC Eventbrite page.
How to submit comments to the consultation
This consultation is now closed and the responses published as a Ministerial Decision.
Data Protection
The information you provide will be processed in compliance with the Data Protection (Jersey) Law 2018.
Find more information in the
Department for the Economy Privacy Notice.
The Government of Jersey may quote or publish responses to this consultation but will not publish the name and addresses of individuals without consent.
Types of publishing may include:
- sending to other interested parties on request
- sending to the Scrutiny Office
- quoting in a published report
- reporting in the media
- publishing on the Government website
- listing on a consultation summary
Confidential responses will still be included in any summary of statistical information received and views expressed.Under the Freedom of Information (Jersey) Law 2011, information submitted to this consultation may be released if a Freedom of Information request requires it, but no personal data may be released.
Responses to the consultation
Consultation Response: Draft Cyber Security (Jersey) Law 202-
gov.je