The Data Protection (Jersey) Law, 2018
("DPJL") was introduced to broadly
mirror the EU General Data Protection Regulation, which came into
force on 25 May 2018.
The DPJL introduced obligations on those that collect or process
data, including:
- Disclosure obligations, including how and what data is
processed.
- Maintaining safeguards and standards on processing and
maintaining data, including actions to take in cases of a data
breach.
- Data subject rights, including objecting to data processing and
the right to erasure (in certain circumstances).
Why is this relevant to funds?
Funds will likely be subject to the DPJL as:
- Personal data is likely collected when investors
subscribe.