DPR: Exemption: A Self Assessment Guide: Compliance

Compliance with the Data Protection (Bailiwick of Guernsey) Law 2001

Data controllers must comply with the provisions of the 2001 Law even if they are exempt from notification

Compliance with the Law involves abiding by the eight Data Protection Principles

In summary they require that data shall be:

fairly and lawfully processed
processed for limited purposes
adequate, relevant and not excessive
accurate and up to date
not kept longer than necessary
processed in accordance with the data subjects' rights
secure
not transferred to countries outside the Bailiwick or the European Economic Area* without adequate protection

* At the time of publication the countries in the EEA are: Austria, Belgium, Denmark, France, Finland, Germany, Greece, Iceland, Ireland, Italy, Liechtenstein, Luxembourg, The Netherlands, Norway, Portugal, Spain, Sweden and the U.K.

Further information about compliance with the Law can be obtained by / from

Internet:	http://www.gov.gg/dataprotection
Telephone:	+44 (0) 1481 742074
Post:	Data Protection Commissioner’s Office P.O. Box 642 Frances House Sir William Place St. Peter Port Guernsey GY1 3JE
Fax Number:	+44 (0) 1481 742077
E-mail:	Contact us via our website