The Law

The Data Protection (Bailiwick of Guernsey) Law, 2017 came into effect on 25 May 2018.

The Bailiwick's law was drafted to reflect the EU's General Data Protection Regulation (GDPR). This approach is designed to ensure our citizens have important rights in this digital era and to ensure the continued free flow of data to and from the Islands which is vital for our economy.

The links below are to the most up-to-date version of each piece of data protection legislation as at 15 June 2021.  All links point to the Guernsey Legal Resources website and copies of each piece of legislation in it original format can be found there also.

Here is a full copy of the law : 

• The Data Protection (Bailiwick of Guernsey) Law, 2017 (consolidated text)
  This is a consolidated version of the primary legislation relating to data protection for the Bailiwick

• The Data Protection (Commencement, Amendment and Transitional) (Bailiwick of Guernsey) Ordinance, 2018 
  This Ordinance covers the commencement of the primary law, including amendments and transitional provisions. 
   
• The Data Protection (General Provisions) (Bailiwick of Guernsey) Regulations, 2018 (consolidated text)
  These Regulations includes the registration, returns and annual levy requirements for controllers and processors as well as record keeping duties. 
   
• The Data Protection (Law Enforcement and Related Matters) (Bailiwick of Guernsey) Ordinance, 2018 (consolidated text)
  This Ordinance covers processing of personal data specifically for law enforcement purposes.

• The Data Protection (International Cooperation and Assistance) (Bailiwick of Guernsey) Regulations, 2018
  These Regulations relates to cooperation and assistance by the Authority with other foreign authorities.  
   
• The Data Protection (Authorised Jurisdiction) (Bailiwick of Guernsey) Ordinance, 2019 (consolidated text)
  This Ordinance designates the United Kingdom as a designated jurisdiction for the purposes of the primary law. 

• European Communities (Implementation of Privacy Directive) (Guernsey) Ordinance, 2004 (consolidated text)
  This Ordinance covers the processing of personal data and the protection of privacy in the electronic communications sector.