Jersey Office of the Information Commissioner

What Jersey Office of the Information Commissioner does

The Jersey Office of the Information Commissioner (JOIC) is the operational name of the Jersey Data Protection Authority, the independent statutory regulator for the Data Protection (Jersey) Law 2018 and the Freedom of Information (Jersey) Law 2011 across the Bailiwick of Jersey. Established by statute in 2018 with roots in the 2011 FOI Law, JOIC is funded through government allocations and mandatory data protection registration fees paid by every Jersey organisation processing personal data. Its core products are regulatory rather than commercial: a self-service registration portal (portal.jerseyoic.org, relaunched December 2025), an FOI appeal portal, a breach reporting portal, a public registry search of registered controllers/processors, and published guidance/audit programmes. JOIC holds quasi-judicial powers including administrative fines up to £500,000, FOI appeal adjudication, and authority to conduct both virtual and on-site compliance audits with board-level interviews.

JOIC serves three principal segments: (1) organisations — including Jersey businesses, charities, sole traders, financial services firms, and all 12 parishes plus scheduled public authorities — that are required to register, report breaches, and comply with data protection obligations; (2) individuals (data subjects) who can raise concerns, exercise rights, and file complaints; and (3) FOI requesters — any member of the public — who may appeal public authority decisions to the Information Commissioner. The office operates from a single headquarters in St Helier with approximately 15 employees, has signed ten memoranda of understanding with peer regulators (UK ICO, Guernsey ODPA, Isle of Man IC, Gibraltar RA, ADGM ODP) and domestic partners (JCSC, States of Jersey Police, C&AG, Children's Commissioner, CIFO), and runs a public enforcement programme issuing fines, public statements with "lessons learned," and FOI decision notices. Its revenue model is a hybrid of government grant funding and recurring registration fees, with no commercial pricing or shareholder structure.

Name

Jersey Office of the Information Commissioner

Legal name

Jersey Office of the Information Commissioner

Website

https://jerseyoic.org

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

Jersey Office of the Information Commissioner is the independent statutory regulator enforcing the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011 across the Bailiwick of Jersey, serving organisations, individuals, and FOI requesters through registration, audit, enforcement, and appeals services funded by government grants and registration fees.

Ownership category

akta.pro rank

Headquarters

HQ city

St Helier

HQ country

Jersey

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure

Revenue model

1. Government Funding: JOIC is established by the Data Protection Authority (Jersey) Law 2018 and operates as a statutory body. It receives government funding to carry out its regulatory functions under the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011.
2. Data Protection Registration Fees: Organizations established in Jersey that are processing personal data are required to register with JOIC and pay registration fees. The Data Protection (Registration and Charges) (Jersey) Regulations 2018 outlines the requirements and particulars of registration and charges.

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

JOIC is the independent statutory regulator for the Data Protection (Jersey) Law 2018 and the Freedom of Information (Jersey) Law 2011 in the Bailiwick of Jersey. It administers mandatory registration of all data controllers/processors established in Jersey, processes FOI appeals against Scheduled Public Authorities, receives and investigates personal data breach reports, conducts virtual and full compliance audits, issues administrative fines up to £500,000, and publishes guidance, enforcement action notices and FOI decision notices.

Product overview

The Jersey Office of the Information Commissioner (JOIC) operates as an independent regulatory body overseeing data protection and freedom of information compliance in Jersey. Rather than a commercial product company, JOIC provides regulatory services including a Data Protection Registration Portal for organisations to register and manage their compliance obligations, an FOI Appeal Portal for challenging public authority decisions, a Breach Reporting Portal for self-reporting data incidents, and a public Registry Search for verifying registered organisations. JOIC also publishes guidance documents and conducts compliance audits (both virtual and full audits) to assess data controller and processor compliance with the Data Protection (Jersey) Law 2018 and Freedom of Information (Jersey) Law 2011.

Differentiator

Problem solved

Functional benefit

Products and services

• Data Protection Registration Portal Self-service online portal where organisations established in Jersey that process personal data can create, renew and manage mandatory data protection registrations with JOIC under the Data Protection Authority (Jersey) Law 2018. Account access uses email one-time passcode authentication.
• FOI Appeal Portal Online service for individuals and requesters to submit Freedom of Information appeals to the Jersey Information Commissioner when they are dissatisfied with the response of a Scheduled Public Authority under the Freedom of Information (Jersey) Law 2011.
• Breach Reporting Portal Secure online form for organisations to self-report data breaches to JOIC for investigation under the Data Protection (Jersey) Law 2018.
• Public Registry Search Publicly searchable registry of organisations registered with JOIC as data controllers or processors under the Data Protection (Jersey) Law 2018, allowing anyone to verify an organisation's registered status.
• Guidance and Resources Library Jargon-free guidance documents covering data protection, freedom of information, artificial intelligence in HR, and related topics, published for individuals and organisations to support compliance and rights awareness.
• Raise a Concern / Complaint Service Service through which individuals can make data protection complaints about organisations (via online form, email, telephone or in person), with formal written complaints, amicable resolution requests and second reviews handled through JOIC's process.
• "Tell Us in Confidence" and "Stay in Touch" Newsletter Service Confidential reporting channel ("Tell Us in Confidence") plus a public email newsletter ("Stay in Touch") providing subscribers with updates on JOIC activities, guidance, events and news.

Named customers7 records

Segments3 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Ten partnerships are on record, tiered core and minor.

• Jersey Cyber Security CentrecoreStrategic or Co-development Partner · 1 January 2025Memorandum of Understanding for cooperation on cyber security matters affecting Jersey. Joint working to promote awareness of data protection and cyber security obligations. Collaborates on guidance and incident response where matters overlap.
• Isle of Man Information CommissionercoreStrategic or Co-development Partner · 1 January 2024Memorandum of Understanding for cooperation between Channel Islands data protection authorities. Promotes consistent approach to data protection regulation across Crown dependencies. Facilitates information sharing and joint working on cross-border matters.
• ADGM Office of Data ProtectioncoreStrategic or Co-development Partner · 1 January 2024Memorandum of Understanding with Abu Dhabi Global Market data protection regulator. Cooperation on data protection matters relevant to both jurisdictions. Promotes consistency in regulatory approach.
• Gibraltar Regulatory AuthoritycoreStrategic or Co-development Partner · 1 January 2024Memorandum of Understanding for cooperation on data protection and information rights matters. Joint working on regulatory consistency. Facilitates cross-border cooperation on enforcement and guidance.
• Information Commissioner for the UK & Northern IrelandcoreStrategic or Co-development Partner · 1 January 2024Memorandum of Understanding with the UK Information Commissioner's Office. Cooperation on data protection matters including cross-border transfers and enforcement. Maintains alignment with UK GDPR standards.
• Jersey Comptroller & Auditor GeneralcoreStrategic or Co-development Partner · 1 January 2024Memorandum of Understanding for cooperation on audit and accountability matters. Ensures coordination between regulatory and audit functions in the Jersey public sector.
• Children's Commissioner for JerseycoreStrategic or Co-development Partner · 1 January 2023Memorandum of Understanding for cooperation on matters relating to children's rights and data protection. Coordinates on issues affecting young people including school visits and education programmes.
• States of Jersey PolicecoreImplementation/ SI/ Consulting Partner · 1 January 2022Memorandum of Understanding for joint investigations into potential criminal offences under data protection legislation. Cooperation on prevention, investigation and detection of criminal offences. JOIC assists but criminal prosecution power lies with HM Attorney General.
• Channel Island Financial Ombudsman (CIFO)minorStrategic or Co-development Partner · 1 January 2021Memorandum of Understanding for cooperation on matters where CIFO's jurisdiction may overlap with data protection obligations of financial services providers.
• Guernsey Office of the Data Protection AuthoritycoreStrategic or Co-development Partner · 1 January 2020Memorandum of Understanding with Guernsey's data protection authority. Promotes consistent regulatory approach across the Channel Islands. Facilitates cooperation on cross-border data protection matters and enforcement.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• ADGM Office of Data Protection: Data protection regulator for the Abu Dhabi Global Market financial free zone. MoU partner with JOIC, comparable in serving a defined jurisdictional mandate anchored to a financial center context.
• Guernsey Office of the Data Protection Authority: Guernsey's independent data protection regulator for the Bailiwick of Guernsey. Closest peer to JOIC given shared Channel Islands context, similar small-jurisdiction dynamics, and an existing MoU for cross-border cooperation.
• Gibraltar Regulatory Authority: Multi-sector regulator for Gibraltar with data protection and information rights responsibilities. MoU partner with JOIC, serving a similarly small British Overseas Territory with a parallel statutory framework.
• Channel Island Financial Ombudsman (CIFO): Independent ombudsman service for financial services complaints across Jersey, Guernsey, Alderney and Sark. Comparable independent quasi-judicial function with an active MoU relationship to JOIC on overlapping jurisdictional matters.
• Isle of Man Information Commissioner: Data protection and information rights regulator for the Isle of Man, another British Crown dependency. MoU partner with JOIC, operating under near-identical small-jurisdiction regulatory dynamics.

Broad incumbents

• Data Protection Commission (Ireland): Ireland's national data protection authority, particularly influential for EU-based multinational tech compliance. Comparable functional mandate at substantially larger national scale and resources.
• Information Commissioner's Office (UK ICO): UK's national data protection and information rights regulator. Larger scale incumbent with directly comparable mandate; MoU partner providing UK GDPR alignment and cross-border cooperation underpinning JOIC's framework.

Others

• Jersey Financial Services Commission (JFSC): Statutory regulator for financial services in Jersey. Operates in the same jurisdiction under a similar statutory structure and dual funding model, providing comparable regulatory governance patterns — and notably a recent subject of JOIC enforcement action.

Regional players

• Cayman Islands Office of the Ombudsman: Ombudsman body in the Cayman Islands with data protection and FOI responsibilities. Comparable small-jurisdiction independent regulator operating under a similar British Overseas Territory legal tradition, but in a separate geography.
• Office of the Privacy Commissioner for Bermuda: Bermuda's national data protection and privacy regulator. Comparable peer serving another small overseas jurisdiction with similar GDPR-aligned framework, but operating in a different geography without direct jurisdictional overlap.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/office-information-commissioner

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Jersey Office of the Information Commissioner