The Data Protection (Bailiwick of Guernsey) Law, 2017 (the Law)
Public Statement
Issued: 16:00 4 May 2022
Controller: The Medical Specialist Group LLP
1. This is a public statement made by the Data Protection Authority (the Authority) under section 64 of The Data Protection (Bailiwick of Guernsey) Law, 2017 (the Law).
2. The Law seeks to ‘…protect the rights of individuals in relation to their personal data and provide for the free movement of personal data…’, and the Authority is the independent regulatory body responsible for overseeing it.
3. The Office of the Data Protection Authority (ODPA) has begun an inquiry in relation to a cyber incident reported by The Medical Specialist Group, following the ODPA receiving notification of a personal data breach on 8th December 2021.
4. Since the breach was reported the ODPA has been in contact with The Medical Specialist Group to assess the nature of the breach, and as result of this preliminary work the ODPA will now be formally investigating The Medical Specialist Group under section 69 of The Data Protection (Bailiwick of Guernsey) Law, 2017.
5. Section 69 of The Data Protection (Bailiwick of Guernsey) Law, 2017 gives the Data Protection Authority powers to launch an inquiry at its own discretion. The Authority can launch a formal inquiry under Section 69 where there are concerns about an organisation’s activities or their compliance with the Law. It is not necessary for there to have been a complaint about a controller or processor’s activities for this type of inquiry to be commenced.
6. The outcome of the ODPA’s inquiry should not be speculated on, or its conclusion pre-judged. No further comment will be made at this time.
7. The ODPA invites any affected person who wishes to discuss their concerns in relation to this matter to make contact by e-mail at casework@odpa.gg or by telephone on 01481 742074.
Legal Framework
1. This is a public statement made by the Data Protection Authority (the Authority) under section 64 of The Data Protection (Bailiwick of Guernsey) Law, 2017 (the Law).
2. The Authority may conduct an inquiry (under section 69 of the Law) where there are concerns about an organisation’s activities or their compliance with the Law.
3. In this case, the controller is The Medical Specialist Group LLP.
&
Indulge