The Law

The Data Protection (Bailiwick of Guernsey) Law, 2017 came into effect on 25 May 2018.

The Bailiwick's law was drafted to reflect the EU's General Data Protection Regulation (GDPR). This approach is designed to ensure our citizens have important rights in this digital era and to ensure the continued free flow of data to and from the Islands which is vital for our economy.

The links below are to the most up-to-date version of each piece of data protection legislation as at 15 June 2021.  All links point to the Guernsey Legal Resources website and copies of each piece of legislation in its original format can be found there also.

Here is a full copy of the law : 

• The Data Protection (Bailiwick of Guernsey) Law, 2017 (consolidated text)
  This is a consolidated version of the primary legislation relating to data protection for the Bailiwick

• The Data Protection (Commencement, Amendment and Transitional) (Bailiwick of Guernsey) Ordinance, 2018 
  This Ordinance covers the commencement of the primary law, including amendments and transitional provisions. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) Regulations, 2018 (consolidated text)
  These Regulations include the registration, returns and annual levy requirements for controllers and processors as well as record keeping duties. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) (Amendment) Regulations, 2024 
  These Regulations alter the registration fees and annual levies outlined within the consolidated version of The Data Protection (General Provisions) (Bailiwick of Guernsey) Regulations, 2018, and are effective from 1 January 2025.
   
• The Data Protection (Law Enforcement and Related Matters) (Bailiwick of Guernsey) Ordinance, 2018 (consolidated text)
  This Ordinance covers processing of personal data specifically for law enforcement purposes.
   
• The Data Protection (International Cooperation and Assistance) (Bailiwick of Guernsey) Regulations, 2018
  These Regulations relates to cooperation and assistance by the Authority with other data protection authorities.  
   

• European Communities (Implementation of Privacy Directive) (Guernsey) Ordinance, 2004 (consolidated text)
  This Ordinance covers the processing of personal data and the protection of privacy in the electronic communications sector.