Data Protection (Bailiwick of Guernsey) Law, 2017
The Bailiwick's GDPR-equivalent law, with EU adequacy.
- Applies in
- Guernsey
- Edition
- Current, as published
- Area
- Data protection & privacy
What an assessor reads first.
The headline requirements in Amoreg’s catalogue, in the issuer’s own numbering where it has one. They are where a review starts, not a transcription of the text.
- Art.5Processing principles and accountabilityPrinciples
- Art.6Lawful basis for processingPrinciples
- Art.13-15Transparency and data subject rightsRights
- Art.28Processor contractsThird parties
- Art.30Records of processing activitiesAccountability
- Art.32Security of processingSecurity
- Art.33-34Breach notification within 72 hoursIncidents
- Art.35Data protection impact assessmentsAccountability
- Art.44International transfersTransfers
How Amoreg keeps you on it.
Enable the Data Protection (Bailiwick of Guernsey) Law, 2017 and the Monitor suggests ODPA as a source. Every publication it records keeps its source, stage and date.
Inspector reads your policies against these 9 requirements every week and opens a finding wherever one falls short, citing the rule and drafting the fix. A person decides what is applied.
Each week
- Read odpa.gg/news
- Check the library against 9 requirements
- Open findings with drafted fixes
- Wait for a person to decide
Policy does not yet set out: processing principles and accountability
- Rule
- Data Protection (Bailiwick of Guernsey) Law, 2017, Art.5
- Area
- Principles
- Proposed by
- Inspector
- Decided by
- A named person, once reviewed
The same ground, elsewhere.
- EU General Data Protection RegulationThe data protection regime for controllers and processors established in, or targeting, the EU.European Union · 9 controls
- UK GDPR & Data Protection Act 2018The UK data protection regime after Brexit, with the ICO as supervisory authority.United Kingdom · 9 controls
- Data Protection (Jersey) Law 2018Jersey's GDPR-equivalent law and the Data Protection Authority (Jersey) Law 2018 registration regime.Jersey · 9 controls
- Isle of Man GDPR & LED Implementing Regulations 2018The applied GDPR under the Data Protection Act 2018 (Isle of Man).Isle of Man · 9 controls
- Cayman Islands Data Protection ActEight data protection principles modelled on the UK Data Protection Act 1998, in force since 2019.Cayman Islands · 6 controls
- DIFC Data Protection Law No. 5 of 2020The DIFC's GDPR-aligned data protection law, with DPO appointment and notification requirements.UAE — DIFC · 9 controls
Also in Guernsey
- GFSC Handbook on Countering Financial Crime (AML/CFT/CPF)The Bailiwick's AML/CFT/CPF rules and guidance for financial services businesses and prescribed businesses, issued under the Criminal Justice (Proceeds of Crime) regulations.Guernsey · 8 controls
- GFSC Cyber Security Rules and GuidanceBoard-owned cyber security based on the NIST functions, for all licensees.Guernsey · 5 controls
- GFSC Finance Sector Code of Corporate GovernancePrinciples for the boards of all Guernsey licensees, with an annual confirmation of compliance.Guernsey · 5 controls
- GFSC Fiduciary Rules and GuidanceConduct, client asset, record keeping and resourcing rules for fiduciary licensees.Guernsey · 5 controls
- Guernsey Beneficial Ownership RegimeResident agent duties to identify and register beneficial owners of Guernsey legal persons.Guernsey · 3 controls
- Guernsey Protection of Investors Law & Collective Investment Scheme RulesLicensing and conduct for investment business and the rules for authorised and registered schemes.Guernsey · 4 controls
Questions
Does Amoreg watch for changes to the Data Protection (Bailiwick of Guernsey) Law, 2017?
Yes. Enable it and the Monitor suggests Office of the Data Protection Authority as a source; every publication it records keeps its source, stage and date.
Can Amoreg check our policies against the Data Protection (Bailiwick of Guernsey) Law, 2017?
Yes. Inspector reads your library against its requirements every week and opens a finding, with the rule it cites and a proposed fix, wherever a policy falls short. A person decides what is applied.
Which edition does Amoreg use?
The current edition as published by the issuer, last verified in August 2026; the Monitor records new publications as they appear.