Welcome to the Gibraltar Regulatory Authority website

GUIDANCE FOR DATA CONTROLLERS

The following is a list of documents that provide guidance on data protection for organisations. Some documents provide general guidance whilst others focus on specific topics such as an individual’s right to access their personal data (Subject Access Requests) and the use of CCTV.

Note: The guidance in this section of the website relates to the data protection regime in place prior to the introduction of the General Data Protection Regulation (“GDPR”) and resulting changes to the Data Protection Act 2004 in May 2018. Some of the guidance remains relevant and useful, however organisations and individuals must be mindful of the changes in the law and that the guidance in this page has not been updated.

For updated guidance please visit https://www.gra.gi/data-protection/general-data-protection-regulation