Run it properly
Register for data protection in
If you hold customers’ names or emails, you register with your regulator — and you have duties after.
Alderney has its own States; its data protection is the Bailiwick’s, below. For Alderney’s other rules, ask the States of Alderney.
- 5 You · 100%
Register with the Office of the Data Protection AuthorityYouOffice of the Data Protection Authority
Every business established in the Bailiwick that handles personal data registers with the Office of the Data Protection Authority (ODPA), sole traders included. From 1 January 2026: £62.22 a year under 50 staff, £2,488.80 from 50; registered charities register free.
Say what you collectYou
Your privacy policy says what you collect, why, who sees it and how long you keep it. Your legal pages do this for your site; tell me about anything else you collect.
Answer requests on timeYou
When someone asks for the data you hold about them: within 4 weeks in Jersey (always 28 days), and within a month in Guernsey and the UK (to the same date next month, 28 to 31 days).
Report a breach within 72 hoursYou
If personal data is lost or exposed and people could be harmed, tell your regulator within 72 hours of finding out (3 days, weekends included) — even before you know everything.
Data can travelYou
The European Commission treats Jersey and Guernsey as giving adequate protection, so personal data can flow between them and the EU without extra paperwork.
Keep going
- GST and VATWhen a sales tax applies to you, and when it does not apply at all.Open
- Take card paymentsA payment account in your business’s name, with a provider that takes businesses where you are.Open
- Your company’s yearEvery date that falls due once the company exists — and the changes that must be reported when they happen.Open
- All of it, in orderPlan my start draws every journey you need, for your place, with your costs.Plan my start
Words in this journey:Data controllerSole trader