Statutory Instruments
DATA PROTECTION
Made
14th November 2023
Laid before Parliament
22nd November 2023
Coming into force
13th December 2023
The Secretary of State makes these Regulations in exercise of the powers conferred by section 74A(1)(a), (3), (5) and (6)(b) of the Data Protection Act 2018 (“the 2018 Act”)(1).
In accordance with section 74A(1)(a) and (3) of the 2018 Act, the Secretary of State considers that the Bailiwick of Jersey ensures an adequate level of protection of personal data for certain transfers.
In accordance with section 182(2) of the 2018 Act, the Secretary of State has consulted with the Commissioner(2) and such other persons as the Secretary of State considered appropriate.
1.—(1) These Regulations may be cited as the Data Protection (Law Enforcement) (Adequacy) (Bailiwick of Jersey) Regulations 2023 and come into force on 13th December 2023.
(2) In these Regulations “Jersey” means the Bailiwick of Jersey.
(3) These Regulations extend to England and Wales, Scotland and Northern Ireland.
2.—(1) For the purposes of Part 3 of the Data Protection Act 2018 (law enforcement processing) the Secretary of State specifies Jersey as ensuring an adequate level of protection of personal data(3) for a transfer described in paragraph (2).
(2) A transfer described by this paragraph is a transfer of personal data by a competent authority(4) to a relevant authority(5) in Jersey which is subject to the Data Protection (Jersey) Law 2018(6), as that Law forms part of the law of Jersey and has effect from time to time.
3. The independent supervisory authority(7) in Jersey is the Data Protection Authority established by Article 2(1) of the Data Protection Authority (Jersey) Law 2018(8), as it forms part of the law of Jersey.
Chris Philp
Minister of State
Home Office
14th November 2023
(This note is not part of the Regulations)
These Regulations specify the Bailiwick of Jersey (“Jersey”) as a third country which provides an adequate level of protection of personal data for the purposes of Part 3 (law enforcement processing) of the Data Protection Act 2018 (c. 12).
This means that personal data can be transferred by UK competent authorities to relevant authorities in Jersey (authorities with comparable law enforcement functions to a UK competent authority), which are subject to the relevant Jersey data protection legislation (specifically the Data Protection (Jersey) Law 2018) without the need for any specific authorisation.
A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private or voluntary sector or community bodies is foreseen.
2018 c. 12 (“the 2018 Act”); section 74A was inserted by S.I. 2019/419. There are other amendments to the 2018 Act but none are relevant.
See section 3(8) of the 2018 Act for the definition of “the Commissioner”.
See section 3(2) of the 2018 Act for the definition of “personal data”.
See section 30 of the 2018 Act for the definition of “competent authority”.
See section 72(2) of the 2018 Act for the definition of “relevant authority”.
Electronic copies of this legislation can be obtained from https://www.jerseylaw.je/laws/enacted/Pages/L-03-2018.aspx. Hard copies can be inspected during office hours and free of charge at the offices of the Home Office at 2 Marsham Street, London, SW1P 4DF.
Referred to in section 74A(4)(b) of the 2018 Act.
Electronic copies of this legislation (v.15.245) can be obtained from https://www.jerseylaw.je/laws/current/PDFs/15.245.pdf. Hard copies can be inspected during office hours and free of charge at the offices of the Home Office at 2 Marsham Street, London, SW1P 4DF.