EU General Data Protection Regulation

This briefing provides an overview of the key changes introduced by the EU's General Data Protection Regulation (the "GDPR"), which will have extra-territorial effect in Jersey in relation to the personal data of EU citizens, and the provisions of which will also be introduced into Jersey domestic law. The GDPR comes into force in May 2018.

Introduction

Data protection laws control how information about people is used by organisations.

Data that relate to living individuals are a commodity. Combating theft, leaks or other misuse of data is a growing challenge. Laws that set minimum standards of behaviour regarding the use of personal data must endeavour to keep pace with technologies which are evolving rapidly.