In order for our site to work, small files called ‘cookies’ have been placed on your device. These mandatory cookies do not process any personal data.
We would also like to use analytics cookies to understand how our site is used by visitors and then use this information to improve our site and the experience of using our site. The service we use is Google Analytics.
Please indicate whether or not you are happy to allow the use of these analytics cookies by selecting one of the options below. You can read more about our cookies before you choose and read our Privacy Notice to find out more information on how we use your personal data
The data protection law only applies if you have any information about (or related to) identifiable people in:
If you only have data for your own personal use, for things such as sending Christmas cards or taking pictures for your own enjoyment, the Law does not apply to your processing.
If you are uncertain about whether your processing falls within this personal/household definition, we have published this short guidance note with some criteria which may assist you in working out whether you are exempt.
You still need to register from scratch on the new portal.
In the previous registration and fees regime, the registration period was 12 months from the date of registration.
The new registration and fees regime applies per calendar year and the law was changed to reflect that. This means that the levy is payable by all controllers and processors between January and February 2021 and then yearly after that.
If you do not have any personal data (don’t forget that includes information about staff and clients) in respect of your own organisation, but you do process it on behalf of another organisation, you are a 'processor' under the Law.
Although this means that you do not have many of the statutory obligations of a controller, you do still need to register and pay an annual levy.
If you have authorised an ODPA Levy Collection Agent (LCA) to pay your annual levy, you do not need to register directly with the ODPA.
But remember, you retain full legal responsibility for how you use people’s data, and you are still obliged to meet your legal duties under data protection law.
You do need to make sure that you have a valid Certificate of Exemption (which your LCA must provide you) which you may be asked to show to the ODPA.
Find out more about the role of an LCA here.
If you are a not-for-profit organisation (as defined in section 4(1) of The Charities and Non Profit Organisations (Enabling Provisions)(Guernsey and Alderney) Law, 2009 you do need to register with the ODPA and meet your legal duties under data protection law.
But you will not need to pay an annual levy.
The ODPA will endeavour to support the regulated community in respect of their statutory registration duties.
Where an individual or organisation knowingly and wilfully fails to comply with any element of the Law, including registration and levy duties, this may be considered an offence and the ODPA has the power to take action and recover unpaid levies.
If you would like to know more about this approach please see: Registration and Levy Duties – Regulatory Approach Summary.