In order for our site to work, small files called ‘cookies’ have been placed on your device. These mandatory cookies do not process any personal data.
We would also like to use analytics cookies to understand how our site is used by visitors and then use this information to improve our site and the experience of using our site. The service we use is Google Analytics.
Please indicate whether or not you are happy to allow the use of these analytics cookies by selecting one of the options below. You can read more about our cookies before you choose and read our Privacy Notice to find out more information on how we use your personal data
Published: 12 September 2019
‘What is striking from this period’s statistics is that all the breaches reported to us were due to human action, whether deliberate or accidental. There was not a single incidence of system error. We must all recognise that it is people’s awareness, attitudes, behaviour and choices that often pose the biggest risk to the protection of personal data, rather than our IT systems. Because of this, my office is laser-focused on raising everyone’s appreciation and awareness of data protection, in the hope that we can create positive cultural change around how people think, and feel, about taking care of personal data.’Part of this awareness-raising is the ODPA’s decision to take part in this year’s Global Privacy Enforcement Network (GPEN) ‘Privacy Sweep’ for the first time. This international intelligence-gathering exercise examines a different theme each year and in 2019, the focus is on how data breach notifications are handled. Mrs Martins said,
‘We will be contacting a sample of local organisations directly, asking them to respond to a short survey from GPEN later this month. Honest responses to the survey are encouraged, as it is only through honesty that an accurate snapshot of the challenges organisations face can be taken, from which we can all learn lessons. Building a culture of honest and constructive learning can help us all to work towards higher standards of compliance.’NOTES This release is part of the bi-monthly breach report statistics the ODPA has been issuing since June 2018 (previous releases are listed below). Statutory breach reporting was one of the key changes to the local data protection law introduced in May 2018. The Data Protection (Bailiwick of Guernsey) Law, 2017 (section 42) states that organisations are legally required to notify the ODPA of any personal data breach within 72 hours of becoming aware of it.
|2 months to 26 August 2019||32|
|2 months to 25 June 2019||50|
|2 months to 22 April 2019||40|
|2 months to 22 February 2019||45|
|2 months to 18 December 2018||28|
|2 months to 18 October 2018||26|