Section 16 (other individuals' data)

Summary

This is a short overview page from the Office of the Data Protection Authority (Guernsey) introducing guidance on Section 16 of the Data Protection (Bailiwick of Guernsey) Law, 2017. It explains when and why organisations need to apply Section 16 when responding to a data subject access request (DSAR) that includes information about people other than the requester, and links to a fuller step by step guide.

• Purpose: Helps anyone responding to a DSAR decide whether to disclose or withhold information about other individuals contained in the requested data.
• Key concept: Section 16 requires balancing the rights of the requesting data subject against the rights of the other individuals identified in the requested information.
• Terminology: The person making the request is the data subject or requestor; people who may be identified in the requested content are referred to as other individuals.

The page itself is introductory and points readers to a separate detailed step by step guide for practical application of Section 16.

Key obligations

• When responding to a DSAR that includes information about other individuals, the organisation must apply the Section 16 balancing test to decide whether to disclose or withhold that third-party information.

Applies to

data controllers, organisations subject to the Data Protection (Bailiwick of Guernsey) Law, 2017