Data Protection strengthens team

Tuesday 02 May 2017

The Office of the Data Protection Commissioner has appointed Lawrence West as Executive Officer ahead of new legislation coming into force in the Channel Islands.

In his new role, Mr West will help provide guidance to the public and organisations on data protection legislation as businesses are being urged to be prepared for incoming data protection regulations around how personal data should be handled.

The General Data Protection Regulation (GDPR) is designed to strengthen existing legislation and is due to come into force in May 2018, and the Office of the Data Protection Commissioner wants business to be ready for the changes.

Emma Martins, Information Commissioner said: “Much work has been done in recent months across the Channel Islands to ensure we are strongly positioned to respond to the impending reform of data protection regulation. Maintaining the islands’ reputation as a well-regulated jurisdiction, in respect of data protection, is more important than ever.”

“Lawrence’s appointment helps strengthen my team as we work with the public and organisations to be prepared for the GDPR. Hopefully, he will also inspire young people to think of data as a future career option.”

The GDPR is in many regards said to be similar to current Channel Islands data protection legislation, however it will:

• Increase the rights of individuals in relation to their personal data
• Widen the definition of personal data – includes genetic, social and economic, for example
• Tighten rules around obtaining consent to use personal information
• Make the appointment of a Data Protection Officer mandatory for some organisations
• Introduce data breach notification within 72 hours to the local DP Authority
• Expand liability beyond data controllers to all organisations that deal with personal data
• Introduce increased fines – up to 4% of a global annual turnover or EUR 20million (whichever is highest).

Speaking about his appointment, Mr West said: “Organisations need to recognise the importance of GDPR and take steps to ensure they have appropriate policy, procedure and infrastructure to tackle issues that may arise or more importantly, prevent issues occurring in the first instance.

“As the profile of GDPR inevitably increases, the public will even further realise the value of their data. Good data governance will become vital in running a successful business.”