Jersey Office of the Information Commissioner
Jersey Office of the Information Commissioner is the independent statutory regulator enforcing the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011 across the Bailiwick of Jersey, serving organisations, individuals, and FOI requesters through registration, audit, enforcement, and appeals services funded by government grants and registration fees.
- Company typePrivate
- Founded2018
- HeadquartersSt Helier, Jersey
- Headcount11–50
- GTM typeB2B and B2C
- OfferingServices
What Jersey Office of the Information Commissioner does
The Jersey Office of the Information Commissioner (JOIC) is the operational name of the Jersey Data Protection Authority, the independent statutory regulator for the Data Protection (Jersey) Law 2018 and the Freedom of Information (Jersey) Law 2011 across the Bailiwick of Jersey. Established by statute in 2018 with roots in the 2011 FOI Law, JOIC is funded through government allocations and mandatory data protection registration fees paid by every Jersey organisation processing personal data. Its core products are regulatory rather than commercial: a self-service registration portal (portal.jerseyoic.org, relaunched December 2025), an FOI appeal portal, a breach reporting portal, a public registry search of registered controllers/processors, and published guidance/audit programmes. JOIC holds quasi-judicial powers including administrative fines up to £500,000, FOI appeal adjudication, and authority to conduct both virtual and on-site compliance audits with board-level interviews.
JOIC serves three principal segments: (1) organisations — including Jersey businesses, charities, sole traders, financial services firms, and all 12 parishes plus scheduled public authorities — that are required to register, report breaches, and comply with data protection obligations; (2) individuals (data subjects) who can raise concerns, exercise rights, and file complaints; and (3) FOI requesters — any member of the public — who may appeal public authority decisions to the Information Commissioner. The office operates from a single headquarters in St Helier with approximately 15 employees, has signed ten memoranda of understanding with peer regulators (UK ICO, Guernsey ODPA, Isle of Man IC, Gibraltar RA, ADGM ODP) and domestic partners (JCSC, States of Jersey Police, C&AG, Children's Commissioner, CIFO), and runs a public enforcement programme issuing fines, public statements with "lessons learned," and FOI decision notices. Its revenue model is a hybrid of government grant funding and recurring registration fees, with no commercial pricing or shareholder structure.
Jersey Office of the Information Commissioner firmographics
Firmographics- Name
- Jersey Office of the Information Commissioner
- Legal name
- Jersey Office of the Information Commissioner
- Website
- https://jerseyoic.org
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Jersey Office of the Information Commissioner is the independent statutory regulator enforcing the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011 across the Bailiwick of Jersey, serving organisations, individuals, and FOI requesters through registration, audit, enforcement, and appeals services funded by government grants and registration fees.
- Ownership category
- akta.pro rank
Where Jersey Office of the Information Commissioner is headquartered
LocationHeadquarters
- HQ city
- St Helier
- HQ country
- Jersey
Offices1 record
Markets served
Jersey Office of the Information Commissioner business model
Business model- GTM type
- B2B and B2C
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Infrastructure
Revenue model
- Government Funding: JOIC is established by the Data Protection Authority (Jersey) Law 2018 and operates as a statutory body. It receives government funding to carry out its regulatory functions under the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011.
- Data Protection Registration Fees: Organizations established in Jersey that are processing personal data are required to register with JOIC and pay registration fees. The Data Protection (Registration and Charges) (Jersey) Regulations 2018 outlines the requirements and particulars of registration and charges.
Go-to-market motion1 record
Distribution channels4 records
Marketing channels6 records
Jersey Office of the Information Commissioner product offering
Product offeringCore offering
JOIC is the independent statutory regulator for the Data Protection (Jersey) Law 2018 and the Freedom of Information (Jersey) Law 2011 in the Bailiwick of Jersey. It administers mandatory registration of all data controllers/processors established in Jersey, processes FOI appeals against Scheduled Public Authorities, receives and investigates personal data breach reports, conducts virtual and full compliance audits, issues administrative fines up to £500,000, and publishes guidance, enforcement action notices and FOI decision notices.
Product overview
The Jersey Office of the Information Commissioner (JOIC) operates as an independent regulatory body overseeing data protection and freedom of information compliance in Jersey. Rather than a commercial product company, JOIC provides regulatory services including a Data Protection Registration Portal for organisations to register and manage their compliance obligations, an FOI Appeal Portal for challenging public authority decisions, a Breach Reporting Portal for self-reporting data incidents, and a public Registry Search for verifying registered organisations. JOIC also publishes guidance documents and conducts compliance audits (both virtual and full audits) to assess data controller and processor compliance with the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011.
Differentiator
Problem solved
Functional benefit
Products and services
- Data Protection Registration Portal Self-service online portal where organisations established in Jersey that process personal data can create, renew and manage mandatory data protection registrations with JOIC under the Data Protection Authority (Jersey) Law 2018. Account access uses email one-time passcode authentication.
- FOI Appeal Portal Online service for individuals and requesters to submit Freedom of Information appeals to the Jersey Information Commissioner when they are dissatisfied with the response of a Scheduled Public Authority under the Freedom of Information (Jersey) Law 2011.
- Breach Reporting Portal Secure online form for organisations to self-report data breaches to JOIC for investigation under the Data Protection (Jersey) Law 2018.
- Public Registry Search Publicly searchable registry of organisations registered with JOIC as data controllers or processors under the Data Protection (Jersey) Law 2018, allowing anyone to verify an organisation's registered status.
- Guidance and Resources Library Jargon-free guidance documents covering data protection, freedom of information, artificial intelligence in HR, and related topics, published for individuals and organisations to support compliance and rights awareness.
- Raise a Concern / Complaint Service Service through which individuals can make data protection complaints about organisations (via online form, email, telephone or in person), with formal written complaints, amicable resolution requests and second reviews handled through JOIC's process.
- "Tell Us in Confidence" and "Stay in Touch" Newsletter Service Confidential reporting channel ("Tell Us in Confidence") plus a public email newsletter ("Stay in Touch") providing subscribers with updates on JOIC activities, guidance, events and news.
Companies that use Jersey Office of the Information Commissioner
Customer profileNamed customers7 records
Segments3 records
Ideal customer profiles2 records
Jersey Office of the Information Commissioner technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Jersey Office of the Information Commissioner partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core and minor.
- Jersey Cyber Security CentrecoreMemorandum of Understanding for cooperation on cyber security matters affecting Jersey. Joint working to promote awareness of data protection and cyber security obligations. Collaborates on guidance and incident response where matters overlap.
- Isle of Man Information CommissionercoreMemorandum of Understanding for cooperation between Channel Islands data protection authorities. Promotes consistent approach to data protection regulation across Crown dependencies. Facilitates information sharing and joint working on cross-border matters.
- ADGM Office of Data ProtectioncoreMemorandum of Understanding with Abu Dhabi Global Market data protection regulator. Cooperation on data protection matters relevant to both jurisdictions. Promotes consistency in regulatory approach.
- Gibraltar Regulatory AuthoritycoreMemorandum of Understanding for cooperation on data protection and information rights matters. Joint working on regulatory consistency. Facilitates cross-border cooperation on enforcement and guidance.
- Information Commissioner for the UK & Northern IrelandcoreMemorandum of Understanding with the UK Information Commissioner's Office. Cooperation on data protection matters including cross-border transfers and enforcement. Maintains alignment with UK GDPR standards.
- Jersey Comptroller & Auditor GeneralcoreMemorandum of Understanding for cooperation on audit and accountability matters. Ensures coordination between regulatory and audit functions in the Jersey public sector.
- Children's Commissioner for JerseycoreMemorandum of Understanding for cooperation on matters relating to children's rights and data protection. Coordinates on issues affecting young people including school visits and education programmes.
- States of Jersey PolicecoreMemorandum of Understanding for joint investigations into potential criminal offences under data protection legislation. Cooperation on prevention, investigation and detection of criminal offences. JOIC assists but criminal prosecution power lies with HM Attorney General.
- Channel Island Financial Ombudsman (CIFO)minorMemorandum of Understanding for cooperation on matters where CIFO's jurisdiction may overlap with data protection obligations of financial services providers.
- Guernsey Office of the Data Protection AuthoritycoreMemorandum of Understanding with Guernsey's data protection authority. Promotes consistent regulatory approach across the Channel Islands. Facilitates cooperation on cross-border data protection matters and enforcement.
Scale indicators3 records
Recent moves6 records
Expansion highlights5 records
Jersey Office of the Information Commissioner competitors and assessment
Company assessmentDirect peers
- ADGM Office of Data Protection: Data protection regulator for the Abu Dhabi Global Market financial free zone. MoU partner with JOIC, comparable in serving a defined jurisdictional mandate anchored to a financial center context.
- Guernsey Office of the Data Protection Authority: Guernsey's independent data protection regulator for the Bailiwick of Guernsey. Closest peer to JOIC given shared Channel Islands context, similar small-jurisdiction dynamics, and an existing MoU for cross-border cooperation.
- Gibraltar Regulatory Authority: Multi-sector regulator for Gibraltar with data protection and information rights responsibilities. MoU partner with JOIC, serving a similarly small British Overseas Territory with a parallel statutory framework.
- Channel Island Financial Ombudsman (CIFO): Independent ombudsman service for financial services complaints across Jersey, Guernsey, Alderney and Sark. Comparable independent quasi-judicial function with an active MoU relationship to JOIC on overlapping jurisdictional matters.
- Isle of Man Information Commissioner: Data protection and information rights regulator for the Isle of Man, another British Crown dependency. MoU partner with JOIC, operating under near-identical small-jurisdiction regulatory dynamics.
Broad incumbents
- Data Protection Commission (Ireland): Ireland's national data protection authority, particularly influential for EU-based multinational tech compliance. Comparable functional mandate at substantially larger national scale and resources.
- Information Commissioner's Office (UK ICO): UK's national data protection and information rights regulator. Larger scale incumbent with directly comparable mandate; MoU partner providing UK GDPR alignment and cross-border cooperation underpinning JOIC's framework.
Others
- Jersey Financial Services Commission (JFSC): Statutory regulator for financial services in Jersey. Operates in the same jurisdiction under a similar statutory structure and dual funding model, providing comparable regulatory governance patterns — and notably a recent subject of JOIC enforcement action.
Regional players
- Cayman Islands Office of the Ombudsman: Ombudsman body in the Cayman Islands with data protection and FOI responsibilities. Comparable small-jurisdiction independent regulator operating under a similar British Overseas Territory legal tradition, but in a separate geography.
- Office of the Privacy Commissioner for Bermuda: Bermuda's national data protection and privacy regulator. Comparable peer serving another small overseas jurisdiction with similar GDPR-aligned framework, but operating in a different geography without direct jurisdictional overlap.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks7 records
Key highlights7 records
Customer concentration
Jersey Office of the Information Commissioner social profiles
Digital presenceJersey Office of the Information Commissioner financial estimates
Financial estimateRevenue estimate
Valuation estimate
Jersey Office of the Information Commissioner leadership team
Management profileNumber of profiles
Jersey Office of the Information Commissioner funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Jersey Office of the Information Commissioner M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Jersey Office of the Information Commissioner
What does Jersey Office of the Information Commissioner do?
JOIC is the independent statutory regulator for the Data Protection (Jersey) Law 2018 and the Freedom of Information (Jersey) Law 2011 in the Bailiwick of Jersey. It administers mandatory registration of all data controllers/processors established in Jersey, processes FOI appeals against Scheduled Public Authorities, receives and investigates personal data breach reports, conducts virtual and full compliance audits, issues administrative fines up to £500,000, and publishes guidance, enforcement action notices and FOI decision notices.
Is Jersey Office of the Information Commissioner a public or private company?
Jersey Office of the Information Commissioner is a private company. It is classified as state government owned and is currently operating.
When was Jersey Office of the Information Commissioner founded?
Jersey Office of the Information Commissioner was founded in 2018. It employs 11 to 50 people.
Where is Jersey Office of the Information Commissioner based?
Jersey Office of the Information Commissioner is headquartered in St Helier, Jersey.
How does Jersey Office of the Information Commissioner make money?
Two revenue lines are on record. Government Funding is the primary driver. The others are data Protection Registration Fees.
Who are Jersey Office of the Information Commissioner's main competitors?
Direct peers on record are ADGM Office of Data Protection, Guernsey Office of the Data Protection Authority, Gibraltar Regulatory Authority, Channel Island Financial Ombudsman (CIFO) and Isle of Man Information Commissioner. Broad incumbents are Data Protection Commission (Ireland) and Information Commissioner's Office (UK ICO). Jersey Financial Services Commission (JFSC) is listed as an others. Regional players are Cayman Islands Office of the Ombudsman and Office of the Privacy Commissioner for Bermuda.
Does Jersey Office of the Information Commissioner have an API?
No public API is recorded for Jersey Office of the Information Commissioner.