Jersey's data protection regime is governed by two laws:
- Data Protection (Jersey) Law 2018
- Data Protection Authority (Jersey) Law 2018
The Data Protection (Jersey) Law 2018 sets out the rights of individuals in respect of their personal data as well as the obligations and conditions organisations must follow to process it.
Data Protection (Jersey) Law 2018 on the Jersey Law website
The Data Protection Authority (Jersey) Law 2018 outlines the requirements for organisations to register with the Office of the Information Commissioner. It gives the Office of the Information Commissioner the power to sanction or fine organisations for misusing data or failing to keep it secure.
Data Protection Authority (Jersey) Law 2018 on the Jersey Law website