32
DAYS LEFT

Registration window open (1 Jan - end of Feb)

If you use personal data in your work you are legally obliged to register during January and February each year.
NEW REGISTRATION? View guidance and create new registration here. 
EXISTING REGISTRATION? Sign-in to Registrations Portal here. 
 

Organisations

Organisations are increasingly reliant upon data. If you have information about people, you will need to understand the compliance requirements that apply to you. Find out more about how to ensure high standards of data handling practices because treating people’s information properly benefits your business.
Data Processing or Privacy Notices

When you collect personal data from anyone, whether online or offline, you need to ensure that you provide detailed information about how their data is going to be handled. Data Processing and Privacy notices need to be clear and relevant.
Handling Data

Whether you are handling a small or large volume of data, you need to understand the steps that must be taken to ensure compliance.

Data Audits

The Law allows the ODPA to conduct data protection audits. All organisations who handle data should consider conducting their own internal audits at regular intervals.
Lawful processing conditions for personal data

Before you start to collect or use people's data, you need to identify and document a 'lawful processing condition' (or 'lawful basis') that you can rely on. Doing this is part of your obligation under the 'lawfulness, fairness & transparency' principle. 
Handling Data Breaches

You may be required to report a data breach to us. Find out about your responsibilities and how to put in place an effective breach response strategy for your organisations.
Data Protection Officers (DPOs)

Properly supported DPOs can add a huge amount to any organisation’s compliance standards. For some organisations, there will be a legal requirement to have a DPO. Find out more about this important role here. If you are a DPO we would encourage you to browse our information hub.

DPIA

4 items

Data Protection Impact Assessments (DPIAs) are an important compliance tool when you are embarking on new processing or making changes to existing processes. In some cases it will a legal requirement.

Templates

Data protection compliance will look different for different organisations and it does not lend itself well to a tick box approach. Templates should be used as part of a wider governance programme and will need to be adapted for your own organisation’s needs.

Schools

The ODPA Schools Programme, launched in November 2020 across all Bailiwick schools, forms part of our strategic plan, and statutory obligation to raise children’s awareness of their rights, and to understand their responsibilities to others.
Charities

Find information specific to your sector here, including tools to help raise awareness and engagement.
Statutory referrals to the ODPA

There are a number of specific areas in the Law that provide for the Authority to be consulted, give approval or accreditation in certain limited circumstances. Some of these areas will be developed further in the months and years ahead and if you have any questions, please do get in touch.

Transferring people’s data outside the Bailiwick

If you are based in the Bailiwick of Guernsey and use data about, or related to, people you need to be aware of some changes to the legal issues surrounding transferring that data outside of the Bailiwick.

Exemptions

There are many exemptions and exceptions with the Law available to controllers/processors, below is a technical update on these and how they might be applied.