Welcome to the Gibraltar Regulatory Authority website


The Data Protection Division of the Gibraltar Regulatory Authority has recently updated its website to include guidance material on data protection. The Guidance Notes have been published after considering frequently asked questions by both members of the public and businesses. This on-going project will see new guidance material added to the website regularly. The new material focuses mainly on how to carry out subject access requests (accessing personal data being held by businesses and organisations) and how businesses should ready themselves for such requests.

Other guidance material of interest to businesses is a check-list of compliancy with data protection and further information about the transfers of personal data outside of the European Economic Area.

The guidance available includes details on how to protect oneself against ID Theft and follows the GRA's press release last month on the posting of personal data on social-networking sites such as Facebook and MySpace.