The Law

The Data Protection (Bailiwick of Guernsey) Law, 2017 came into effect on 25 May 2018.

The Bailiwick's law was drafted to reflect the EU's General Data Protection Regulation (GDPR). This approach is designed to ensure our citizens have important rights in this digital era and to ensure the continued free flow of data to and from the Islands which is vital for our economy.

Here is a full copy of the law (all link to Guernsey Legal Resources): 

• The Data Protection (Bailiwick of Guernsey) Law, 2017
  This is the primary legislation relating to data protection for the Bailiwick 

• The Data Protection (Commencement, Amendment and Transitional) (Bailiwick of Guernsey) Ordinance, 2018
  This Ordinance covers the commencement of the primary law, including amendments and transitional provisions. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) Regulations, 2018
  These Regulations includes the registration, returns and annual levy requirements for controllers and processors as well as record keeping duties. 
   
• The Data Protection (Law Enforcement and Related Matters) (Bailiwick of Guernsey) Ordinance, 2018
  This Ordinance covers processing of personal data specifically for law enforcement purposes.
  
   
• The Data Protection (International Cooperation and Assistance) (Bailiwick of Guernsey) Regulations, 2018
  These Regulations relates to cooperation and assistance by the Authority with other foreign authorities.  
   
• The Data Protection (Authorised Jurisdiction) (Bailiwick of Guernsey) Ordinance, 2019
  This Ordinance designates the United Kingdom as a designated jurisdiction for the purposes of the primary law. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) (Amendment) Regulations, 2019
  These Regulations make a number of changes to the 2018 Regulations, largely in relation to the registration and other duties. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) (Amendment No.2) Regulations, 2019
  These Regulations make incidental changes to the 2018 Regulations. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) (Amendment) Regulations, 2020
  These Regulations make the necessary changes required for the ODPA registration, return and levy regime. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) (Amendment No.2) Regulations, 2020
  These Regulations make additional changes required for the ODPA registration, return and levy regime. 
   

• European Communities (Implementation of Privacy Directive) (Guernsey) Ordinance, 2004
  This Ordinance covers the processing of personal data and the protection of privacy in the electronic communications sector.