Jersey. Comprehensive data protection. Act
DPAJLData Protection Authority (Jersey) Law 2018
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Establishes the Jersey Data Protection Authority and the Information Commissioner, and gives the Authority powers to investigate, order corrective action and impose administrative fines. Day-to-day work is delegated to the Commissioner, while the Authority keeps fining and public statement powers.
- Key themes
- Unique features
Tiered caps: £5m, £10m, and an alternative cap of £300,000 or 10% of global turnover; public-interest not-for-profit processors capped at £10,000.
- SaaS relevance
Determines the penalty exposure of any SaaS provider within DPJL scope.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- See DPJL
- Maximum penalty
- Up to £10m; alternative cap £300,000 or 10% of global turnover (higher)
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text jerseylaw.je
- Authority
- Jersey Data Protection Authority
§5Where it applies
- Domestic law of
- Jersey
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.