Cyber Security (Jersey) Law: An Overview

On 22 January 2026, the States Assembly adopted the Cyber Security (Jersey) Law (the Law), marking a significant step in formalising Jersey’s cyber resilience framework. The Law received Privy Council approval on 3 June 2026 and, once in force, will introduce mandatory cyber security obligations for certain organisations operating in the Island. 

In particular, the Law establishes the statutory role of the Jersey Cyber Security Centre (JCSC) as both an advisory body and an incident response authority, while introducing a regulatory framework for operators of essential services (OES), broadly aligned with equivalent regimes in the UK and EU. 

This briefing outlines the key features of the Law and its practical implications.