Data protection registration in Jersey: the JOIC explained

If your business holds personal details, even just customer names and phone numbers, it almost certainly has to register with the Jersey Office of the Information Commissioner (opens in a new tab) (JOIC). This guide sets out the rules as the JOIC published them on 21 October 2026.

We are a web studio, not legal advisers. The JOIC can answer questions about your own situation.

Who has to register?

All controllers and processors established in Jersey, including sole traders, under the Data Protection (Jersey) Law 2018 and the Data Protection Authority (Jersey) Law 2018. In practice, if you keep customer, staff or supplier details, you need to register.

How much does it cost?

For an organisation with fewer than 10 staff, the JOIC lists a £70 base charge. A £50 Proceeds of Crime charge or a £50 special category charge may also apply, but never both, depending on the kind of business. Charges can change, so check the JOIC’s registration page (opens in a new tab) for the current figures before you pay.

When do I renew?

Registrations renew every year, by the last day of February.

How to register

Register or renew online through the JOIC portal (opens in a new tab). You will be asked what kind of personal data you hold and why.

What if I don’t register?

Not registering when you should is a criminal offence. It is quicker and cheaper to register than to deal with the consequences.

What it means for your website

A website that collects names, emails or enquiries needs a privacy notice explaining what you collect and why, and a cookie banner if you use analytics or marketing cookies. Our guide to what the law asks of a Jersey business website covers both.

The short checklist

• Do you hold any personal details? Then register.
• Register online through the JOIC portal.
• Check the current charge for your size of business.
• Renew by the last day of February each year.
• Put a privacy notice on your website.