Data protection registration window opens on 1 January 2025

The Office of the Data Protection Authority (ODPA)’s annual registration window opens next month, from 1 January until 28 February 2025.

Anyone (including sole traders, landlords and small businesses) who meets the following three criteria will need to register or renew with the ODPA:

1. You are established in the Bailiwick of Guernsey.
2. You are working with personal data (i.e. any information that may identify individual people, such as your staff members, your clients, your business contacts, your service users, your tenants etc.)
3. The activity you are performing is not part of your personal/household affairs.

The annual registration fee for an organisation with fewer than 50 full-time equivalent staff (including landlords and sole traders) is £60 and the fee for an organisation with 50 or more full-time staff is £2,400 per year.
Charities and non-profit organisations can still register free of charge.

The registration fee enables the DPA to fulfil its legal and political requirements to operate independently of the States of Guernsey. Independence is a necessary condition for the DPA’s effective regulatory oversight. Being able to demonstrate this independence played a critical role in the Bailiwick renewing its ‘adequacy’ status with the European Commission earlier this year. This status allows the free flow of data between the islands and the EU which is a key driver for the Bailiwick’s current and future economic success.

Ensuring our jurisdiction has a properly resourced and effective data protection regulator safeguards islanders’ rights, supports businesses’ lawful handling of personal information, and serves to underpin the Bailiwick’s digital strategy. On a practical level, the community benefits from free advice and guidance on matters related to the protection of people's data via: drop-ins, study visits, events, schools' outreach programme and other educational activities.

To give an indication of the breadth of activity the DPA’s team is responsible for, in 2023 it: contributed to 33 events to share knowledge with the local community, educated 1,128 children via its schools’ outreach programme, handled 56 complaints from members of the public against local controllers, processed 151 personal data breaches and published 12 new guidance notes to help organisations comply with the law.

“The domestic and global data-protection landscape is posing greater threats than ever to individuals’ rights and freedoms. Whether it is ensuring AI models are adopted in a lawful manner, or protecting our children online, the Bailiwick relies on an effective, properly resourced regulator”, said Bailiwick Data Protection Commissioner Brent Homan. “Our fee model enables the DPA to fulfill its statutory obligations and serve the Bailiwick’s residents at the high standards that they deserve.”

Deputy Rob Prow, President of the Committee for Home Affairs which is responsible for Data Protection, said:

‘The Data Protection Authority plays an important role in ensuring that the Bailiwick of Guernsey remains a safe and secure place to work and live. We live in a digital age, so it is vital that we have a robust regulatory framework that supports people’s personal data being processed appropriately. The DPA operates independently of the States for good reason and the collection of registration fees is an important element of that independence.’

Background: 

In 2020 the States of Guernsey supported the DPA’s move to a self-funded model. This means that all of its operational costs are covered by annual fees paid by the regulated community (i.e. local businesses, government and other organisations who handle personal data).