ODPA
Statement of Guidance
61 published document(s) from Office of the Data Protection Authority (Guernsey).
| Citation | Status | Summary |
|---|---|---|
| Accountability and Governance | Status not confirmed | This ODPA guidance explains the accountability and governance provisions of the data protection Law, which sit alongside its transparency requirements. It… |
| Appointing a Processor Operating Exclusively in the Bailiwick of Guernsey | Status not confirmed | This is a case study guidance note from the Guernsey Office of the Data Protection Authority illustrating how a controller should appoint a data processor… |
| Artificial Intelligence Guidance | Status not confirmed | This is general guidance from the Office of the Data Protection Authority (Guernsey) explaining how the Data Protection (Bailiwick of Guernsey) Law, 2017… |
| CCTV Guidance | Status not confirmed | This is a short guidance page from the Office of the Data Protection Authority (Guernsey) on using Closed Circuit Television (CCTV). It explains that orga… |
| Cloud Computing | Status not confirmed | This is general guidance from the Office of the Data Protection Authority (Guernsey) explaining what cloud-based services are and what practical steps ind… |
| Conditions for Lawful Processing (Data Protection (Bailiwick of Guernsey) Law, 2017) | Status not confirmed | This guidance from the Guernsey Office of the Data Protection Authority explains the lawful bases (conditions) that a controller must identify and documen… |
| Consent | Status not confirmed | This is a short introductory guidance page from the Office of the Data Protection Authority explaining the concept of 'consent' as one of the lawful proce… |
| Consent Guidance | Status not confirmed | This is guidance from the Guernsey Office of the Data Protection Authority explaining how organisations should use 'consent' as a lawful basis for process… |
| Contracts between Controllers and Processors | Status not confirmed | This is ODPA guidance explaining what Guernsey's Data Protection Law requires when a controller engages a processor to handle personal data. It sets out t… |
| Controller Self-Assessment Guidance | Status not confirmed | This is explanatory guidance issued by the Office of the Data Protection Authority (Guernsey) to accompany the controllers' self-assessment questionnaire… |
| Controller, Joint Controller, Processor or Secondary Processor? | Status not confirmed | This is guidance from the Guernsey Office of the Data Protection Authority explaining how to determine whether an organisation is acting as a controller,… |
| Cyber security checklist | Status not confirmed | This is a practical checklist from the Office of the Data Protection Authority (Guernsey) offering recommended cyber security actions for organisations th… |
| DPIA | Status not confirmed | This is ODPA guidance explaining what a Data Protection Impact Assessment (DPIA) is, when one is legally required, and why it matters for compliance. It i… |
| DSAR Guidance Tool – User Guide (DPO to DPO) | Status not confirmed | This is practical, non-binding guidance from the ODPA aimed at Data Protection Officers (DPOs) and staff handling Data Subject Access Requests (DSARs), ex… |
| Data Audits | Status not confirmed | This ODPA guidance explains the concept of data protection audits under Guernsey's data protection law, distinguishing between statutory audits the ODPA i… |
| Data Collection: a simple guide | Status not confirmed | This is a simple guidance note from the ODPA explaining how organisations should collect personal data from individuals in a way that complies with the pr… |
| Data Ethics | Status not confirmed | This is an informational page from the Guernsey Office of the Data Protection Authority (ODPA) explaining its approach to data ethics. It does not set out… |
| Data Processing or Privacy Notices | Status not confirmed | This ODPA guidance explains the requirement for organisations that collect personal data to provide clear, relevant and accurate data processing or privac… |
| Data Protection Officers (DPOs) | Status not confirmed | This is ODPA guidance explaining when organisations must appoint a Data Protection Officer (DPO) under section 47 of the Data Protection (Bailiwick of Gue… |
| Data Sharing - A Simple Guide | Status not confirmed | This is general guidance from the Guernsey ODPA explaining how to share personal data lawfully under the Data Protection (Bailiwick of Guernsey) Law, 2017… |
| Data Subject Access Request Guide for Controllers | Status not confirmed | This is guidance from the Guernsey Office of the Data Protection Authority (ODPA) explaining how organisations acting as data controllers should handle da… |
| Data Subject Access Requests | Status not confirmed | This is an ODPA guidance page introducing data subject access requests (DSARs) under the Data Protection (Bailiwick of Guernsey) Law, 2017. It explains wh… |
| Data protection by design and default | Status not confirmed | This is ODPA guidance explaining the 'Data Protection by Design and Default' requirement under Section 32 of the Data Protection (Bailiwick of Guernsey) L… |
| Data protection in employment | Status not confirmed | This is a guidance page from Guernsey's Office of the Data Protection Authority explaining that employers who hold personal data about staff must handle i… |
| Data sharing | Status not confirmed | This is guidance from Guernsey's Office of the Data Protection Authority explaining what data sharing is and how controllers can share personal data lawfu… |
| Direct Marketing | Status not confirmed | This is a landing page from the Guernsey Office of the Data Protection Authority (ODPA) introducing its guidance on direct marketing. It explains that dir… |
| Direct Marketing - A Guide for Organisations | Status not confirmed | This is ODPA guidance explaining how organisations in the Bailiwick of Guernsey must comply with data protection and privacy law when carrying out direct… |
| Engaging processors | Status not confirmed | This is guidance from the Guernsey Office of the Data Protection Authority (ODPA) explaining what organisations must do when they engage third parties, kn… |
| Established in the Bailiwick | Status not confirmed | This is ODPA guidance explaining when a controller, processor or other person is considered 'established in the Bailiwick of Guernsey' under section 111 o… |
| Everything You Need to Know About ODPA Registration and Levy | Status not confirmed | This guidance from the Office of the Data Protection Authority (ODPA) explains the registration and levy regime that has applied since 2021 to controllers… |
| Exemptions | Status not confirmed | This guidance from the ODPA explains the exemptions and exceptions available to controllers and processors under the Data Protection (Bailiwick of Guernse… |
| Exemptions Outlined in Schedule 8 of the Data Protection (Bailiwick of Guernsey) Law, 2017 - Technical Guidance | Status not confirmed | This is technical guidance from the Guernsey Office of the Data Protection Authority explaining the exemptions listed in Schedule 8 of the Data Protection… |
| Guidance for Administrators and Administered Entities | Status not confirmed | This is ODPA guidance explaining when administered entities (such as SPVs, companies, trusts, partnerships and foundations) and their administrators (fund… |
| Guidance for CCTV Users | Status not confirmed | This guidance from the Guernsey Office of the Data Protection Authority explains how organisations operating CCTV must comply with the Data Protection (Ba… |
| Guidance on International Data Transfers | Status not confirmed | This is ODPA guidance explaining how controllers and processors in the Bailiwick of Guernsey should approach transfers of personal data outside the Bailiw… |
| Guidance on registration | Status not confirmed | This is ODPA guidance explaining the annual registration obligation under The Data Protection (Bailiwick of Guernsey) Law, 2017. It sets out who must regi… |
| Handling Data Breaches | Status not confirmed | This is general guidance from the Guernsey ODPA explaining what counts as a personal data breach and what organisations must do if one occurs. It sets out… |
| How to link a DPIA to the data protection principles | Status not confirmed | This is ODPA guidance offering a practical checklist of questions to help organisations link a Data Protection Impact Assessment (DPIA) to the seven data… |
| Information Sharing in Health Emergencies at Work | Status not confirmed | This is guidance from the Guernsey Office of the Data Protection Authority (ODPA) explaining how employers can lawfully share information about an employe… |
| Information sharing in health emergencies at work | Status not confirmed | This is short guidance from the Office of the Data Protection Authority (Guernsey) aimed at employers, explaining how they can lawfully share information… |
| Information to be Given (Privacy Notice Guidance) | Status not confirmed | This guidance from the Guernsey Office of the Data Protection Authority explains the 'right to information' obligations under the Data Protection (Bailiwi… |
| Law Enforcement Ordinance | Status not confirmed | This ODPA guidance explains the relationship between the Data Protection (Bailiwick of Guernsey) Law, 2017 (the Law) and the Data Protection (Law Enforcem… |
| Lawful processing conditions for personal data | Status not confirmed | This ODPA guidance explains that anyone collecting or using personal data in Guernsey must first identify and document a lawful processing condition (lawf… |
| Lawful processing conditions for special category data | Status not confirmed | This is ODPA guidance explaining what counts as 'special category data' under Guernsey data protection law and setting out the lawful processing condition… |
| Levy Collection Agents Guidance | Status not confirmed | This guidance explains the optional Levy Collection Agent (LCA) route introduced in January 2021, under which certain GFSC-regulated organisations can reg… |
| Managing Personal Data Breaches | Status not confirmed | This guidance from the Office of the Data Protection Authority (ODPA) explains how controllers and processors under the Data Protection (Bailiwick of Guer… |
| Overview: Appointment of Processors | Status not confirmed | This is a short guidance note from the Guernsey Office of the Data Protection Authority (ODPA) providing a simple visual checklist of the steps an organis… |
| Processor Assessments | Status not confirmed | This is ODPA guidance explaining how controllers should assess the suitability of processors before and during engagement, as part of a wider suite of gui… |
| Processor Self-Assessment Guidance | Status not confirmed | This is explanatory guidance issued by the Guernsey Office of the Data Protection Authority (ODPA) to help processors complete the processors' self-assess… |
| Protect against phishing | Status not confirmed | This is general awareness guidance published by the Office of the Data Protection Authority (Guernsey) explaining what phishing is and how individuals and… |
| Registration guidance for private landlords | Status not confirmed | This ODPA guidance explains when private landlords in Guernsey must register as a data controller under the Data Protection (Bailiwick of Guernsey) Law, 2… |
| Registration guidance for sole traders and small businesses | Status not confirmed | This is ODPA guidance clarifying that, since 2021, sole traders and small businesses that process personal data and are 'Established in the Bailiwick' of… |
| Section 16 (other individuals' data) | Status not confirmed | This is a short overview page from the Office of the Data Protection Authority (Guernsey) introducing guidance on Section 16 of the Data Protection (Baili… |
| Section 16 Guidance | Status not confirmed | This ODPA guidance explains how a data controller should handle a data subject access request (DSAR) under section 15 of the Data Protection (Bailiwick of… |
| Statutory referrals to the ODPA | Status not confirmed | This guidance page from the Office of the Data Protection Authority (Guernsey) explains the specific sections of the data protection Law under which organ… |
| Subject Access Request Guide for Data Subjects | Status not confirmed | This is guidance from the Guernsey Office of the Data Protection Authority explaining, for individuals (data subjects), how to make a subject access reque… |
| Templates | Status not confirmed | This is a resource page from the Guernsey ODPA listing templates and self-assessment tools that organisations can use to support their data protection com… |
| Ten-step Practical AI Guidance | Status not confirmed | This is practical guidance from the Guernsey ODPA setting out ten steps organisations should follow when using Artificial Intelligence, including generati… |
| The Seven Data Protection Principles | Status not confirmed | This is general guidance from the Office of the Data Protection Authority (Guernsey) explaining the seven core data protection principles set out in the D… |
| Transfer Impact Assessments | Status not confirmed | This is ODPA (Guernsey) guidance setting out a self-assessment tool and methodology for carrying out a Transfer Impact Assessment (TIA) before transferrin… |
| Transferring people's data outside the Bailiwick | Status not confirmed | This is general guidance from the Office of the Data Protection Authority (Guernsey) explaining what counts as a 'data transfer' outside the Bailiwick and… |