Guernsey Data Protection Law 2017
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | GG DPL 2017 |
| Region | Europe |
| Country or scope | Guernsey |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers GG DPL 2017
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
GG-DPL-SEC Duty to Ensure Security | Controllers and processors must take reasonable steps to ensure the security of personal data against unauthorised or unlawful processing, loss or damage, including integrity verification of processing software (Data Protection (Bailiwick of Guernsey) Law 2017, duty to ensure security) | Scan |
GG-DPL-37 Prescribed Records | Controllers and processors must keep prescribed records and produce them for inspection by the Data Protection Authority on request, requiring a named, populated inventory of processing systems (Data Protection (Bailiwick of Guernsey) Law 2017, s. 37) | Scan |
GG-DPL-PRIN Integrity and Confidentiality Principle | Personal data must be processed securely and kept accurate, which presupposes fully described components with name and version (Data Protection (Bailiwick of Guernsey) Law 2017, data-protection principles) | Scan |
GG-DPL-PROC Processor Guarantees | Controllers may only engage processors giving sufficient guarantees of compliant, secure processing, requiring supplier visibility for third-party software (Data Protection (Bailiwick of Guernsey) Law 2017, processor provisions) | Scan |
GG-DPL-BRE Breach Notification and Records | Notification and record duties in case of personal-data breach require identifying exactly which components were affected (Data Protection (Bailiwick of Guernsey) Law 2017, breach notification and records provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to GG DPL 2017.
Greece Law 4624/2019
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Holy See Data Protection Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.