Jersey Data Protection Law 2018
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | JE DPL 2018 |
| Region | Europe |
| Country or scope | Jersey |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers JE DPL 2018
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
JE-DPL-21 Security of Personal Data | Controllers and processors must implement technical and organisational measures proportionate to risk, ensuring ongoing confidentiality, integrity, availability and resilience of processing systems (Data Protection (Jersey) Law 2018, Art. 21) | Scan |
JE-DPL-PRIN Integrity and Confidentiality Principle | Personal data must be processed in a manner that ensures its appropriate security, requiring known versions of every processing component (Data Protection (Jersey) Law 2018, Art. 8 data-protection principles) | Scan |
JE-DPL-REC Record-Keeping Duty | Controllers and processors must keep records of their processing activities, including a named, populated inventory of processing software (Data Protection (Jersey) Law 2018, record-keeping provisions) | Scan |
JE-DPL-PROC Processor Engagement Guarantees | A controller may only use processors providing sufficient guarantees of compliant processing, requiring supplier visibility for third-party components (Data Protection (Jersey) Law 2018, processor provisions) | Scan |
JE-DPL-BRE Breach Assessment Readiness | Personal-data-breach notification duties require the ability to identify exactly which software components were involved in an incident (Data Protection (Jersey) Law 2018, breach-notification provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to JE DPL 2018.
Italy ACN Cybersecurity
Agenzia per la Cybersicurezza Nazionale guidelines - National Cybersecurity Perimeter, supply chain.
Kosovo Law No. 06/L-082 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.