Welcome to the Gibraltar Regulatory Authority website


Welcome to the GRA's webpage on data protection and privacy awareness. This page provides information on the work that the GRA carries out to raise data protection awareness and privacy amongst the general public.

As well as raising awareness about the rights of individuals under data protection law, the GRA’s campaign aims to raise awareness of the risks to privacy from digital technology, and promote its responsible use, so that people have sufficient knowledge and understanding to make informed decisions about the opportunities offered by digital technology.

The GRA’s “Control Your Privacy” awareness raising campaign was launched in January 2014. The campaign involves a combination of activities, which can be summarised as comprising of 1) an awareness raising program for school students, 2) a social media campaign, 3) a yearly awareness raising event and 4) workshops for associations.

1) Awareness raising programme for school students

A campaign for schools has progressively developed to establish a yearly awareness raising framework involving middle and comprehensive schools in Gibraltar. In this respect, members of the GRA attend the schools to deliver presentations to students, followed by a Q&A session. Students are also asked to complete a privacy survey (found under the links below):

·Data protection schools survey report 2018

· Data protection schools survey report 2017

· Data protection schools survey report 2016

· Data protection schools survey report 2015

· Data protection schools survey report 2014

2) Social Media Campaign

The GRA makes use of its social media platforms to disseminate advice and information, and engage with the general public. Further to ad hoc advice and social media messages based on “current news”, the GRA has developed specific social media campaigns that run for a number of weeks, which focus on a particular subject (see below):

·2017-18 School Privacy Awareness Survey

·Data Protection Impact Assessments

·Data Protection Officer

·Assess your data protection compliance

·Data protection CCTV

·Know your data protection responsibilities

·Know your data protection rights

·. Rights of Individuals under GDPR

·. GDPR: Getting Started

·. GDPR: Personal Data Breach Notification

3) Data Protection Day

The GRA annually holds a “Data Protection Day” at the Piazza, where officials actively engage with the public to raise awareness of issues relating to data protection and privacy. Over the years, this event has been supported by other organisations such as the Citizen’s Advice Bureau, the Royal Gibraltar Police, and the Youth Service.

4) Workshops for associations

In addition to the activities mentioned in the foregoing, the GRA also arranges Data Protection workshops, where the GRA delivers a presentation followed by a Q&A session. The workshops provide an overview of data protection law, and are normally arranged at the request of an association that wants to raise data protection awareness amongst its members.

5) Resources for teachers

The GRA has developed educational resources, which teachers can use to educate students on privacy and data protection. Two packs have been developed – one for middle schools and one for secondary schools, however teachers may adapt and use the resources in each pack across different ages should they consider it appropriate and/or useful.

. Middle School Pack

. Middle School Booklet

. Secondary School Pack

The lesson plans integrate into Gibraltar’s ‘privacy awareness regime’ an International Framework, which was developed by an international working group on digital education that the GRA forms part of. The framework was adopted globally by the International Conference of Data Protection and Privacy Commissioners.