Guernsey Data Protection Series - Principles, Key Concepts And Rights

The Data Protection (Bailiwick of Guernsey) Law, 2017 (the "DPL") came into force on 25 May 2018 to coincide with the enforcement of the EU's General Data Protection Regulation (EU) 2016/670 (the "GDPR"). The European Commission has granted Guernsey "adequacy" status and recognises the legal standards applicable in Guernsey as covering all the principles necessary for an adequate level of protection for natural persons. This allows EU organisations to easily transfer personal data to Guernsey. The Office of the Data Protection Authority (the "ODPA") is the independent supervisory authority for the purposes of DPL and associated legislation.

In this briefing we will explore the object of the DPL, some of the key concepts used in the DPL, what the data principles are and the rights of data subjects.