Opening Times

The offices of the Gibraltar Regulatory Authority are open from 9:00am to 5:00pm Monday to Friday


Further to the policy of HM Government of Gibraltar to increase social distancing and slow the spread of COVID-19, our offices are closed to the public until further notice. We are working remotely and we will endeavour to assist you in as much as we are able to do so in the circumstances. Please email any enquiries to or call us on 200 74636, leave a voicemail message and a member of our team will get back to you.

We accept requests for licence applications and renewals by email, together with any necessary licence variations if applicable. Payment for these may be effected by bank transfer only. Licences will then be scanned and sent by e-mail together with a copy of the receipt. The originals will be held for collection at a later date when restrictions are lifted, or posted if required. For any queries regarding the renewal of your licence please send an e-mail to

Welcome to the Gibraltar Regulatory Authority website


What is Data Protection?

The term “Data Protection” relates to the processes and controls used to safeguard information about individuals and their privacy. In Gibraltar, the Data Protection Act 2004 is the law that governs how organisations (both private and public) should use information about individuals. It includes the rules that organisations must follow and the Rights that individuals have in respect of information about them e.g. the Right of access to your personal data.

When does the Data Protection Act 2004 apply?

The law applies whenever an organisation processes (e.g. stores, collects, transmits, uses etc.) information that relates to a person such as a person’s name, DOB, their hobbies, comments about their performance, location, etc.

What we do?

Under the Data Protection Act 2004, the Gibraltar Regulatory Authority is nominated as the Data Protection Commissioner. The Gibraltar Regulatory Authority is thereby the independent statutory body responsible for the enforcement of the Data Protection Act 2004, and carries out the functions assigned to it, to uphold the rights of individuals and their privacy. Amongst other things, this includes the provision of advice on data protection related matters and the investigation of complaints, as well as raising awareness on privacy issues.