Welcome to the Gibraltar Regulatory Authority website


Welcome to the GRA's webpage on data protection and privacy awareness. This page provides information on the work that the GRA carries out to raise data protection awareness and privacy amongst the general public.

As well as raising awareness about the rights of individuals under data protection law, the GRA’s campaign aims to raise awareness of the risks to privacy from digital technology, and promote its responsible use, so that people have sufficient knowledge and understanding to make informed decisions about the opportunities offered by digital technology.

The GRA’s “Control Your Privacy” awareness raising campaign was launched in January 2014. The campaign involves a combination of activities, which can be summarised as comprising of 1) an awareness raising program for school students, 2) a social media campaign, 3) a yearly awareness raising event and 4) workshops for associations.

1) Awareness raising programme for school students

A campaign for schools has progressively developed to establish a yearly awareness raising framework involving middle and comprehensive schools in Gibraltar. In this respect, members of the GRA attend the schools to deliver presentations to students, followed by a Q&A session. Students are also asked to complete a privacy survey (found under the links below):

·Data protection schools survey report 2017

·Data protection schools survey report 2016

·Data protection schools survey report 2015

·Data protection schools survey report 2014

2) Social Media Campaign

The GRA makes use of its social media platforms to disseminate advice and information, and engage with the general public. Further to ad hoc advice and social media messages based on “current news”, the GRA has developed specific social media campaigns that run for a number of weeks, which focus on a particular subject (see below):

·Data Protection Impact Assessments

·Data Protection Officer

·Assess your data protection compliance

·Data protection CCTV

·Know your data protection responsibilities

·Know your data protection rights

.Rights of Individuals under GDPR

.GDPR: Getting Started

.GDPR: Personal Data Breach Notification

3) Data Protection Day

The GRA annually holds a “Data Protection Day” at the Piazza, where officials actively engage with the public to raise awareness of issues relating to data protection and privacy. Over the years, this event has been supported by other organisations such as the Citizen’s Advice Bureau, the Royal Gibraltar Police, and the Youth Service.

4) Workshops for associations

In addition to the activities mentioned in the foregoing, the GRA also arranges Data Protection workshops, where the GRA delivers a presentation followed by a Q&A session. The workshops provide an overview of data protection law, and are normally arranged at the request of an association that wants to raise data protection awareness amongst its members.