Run it properly
Register for data protection in
If you hold customers’ names or emails, you register with your regulator — and you have duties after.
In each place above, a business that handles personal data — customers’ names and emails count — registers with its regulator, and in most cases pays a yearly fee.
- 5 You · 100%
Register with the Information Commissioner’s OfficeYouInformation Commissioner’s Office
Most businesses that handle personal data pay the Information Commissioner’s Office (ICO) a yearly fee: £52, £78 or £3,763 by size, since February 2025. The ICO’s fee checker says which applies.
Say what you collectYou
Your privacy policy says what you collect, why, who sees it and how long you keep it. Your legal pages do this for your site; tell me about anything else you collect.
Answer requests on timeYou
When someone asks for the data you hold about them: within 4 weeks in Jersey (always 28 days), and within a month in Guernsey and the UK (to the same date next month, 28 to 31 days).
Report a breach within 72 hoursYou
If personal data is lost or exposed and people could be harmed, tell your regulator within 72 hours of finding out (3 days, weekends included) — even before you know everything.
Data can travelYou
The European Commission treats Jersey and Guernsey as giving adequate protection, so personal data can flow between them and the EU without extra paperwork.
Keep going
- GST and VATWhen a sales tax applies to you, and when it does not apply at all.Open
- Take card paymentsA payment account in your business’s name, with a provider that takes businesses where you are.Open
- Your company’s yearEvery date that falls due once the company exists — and the changes that must be reported when they happen.Open
- All of it, in orderPlan my start draws every journey you need, for your place, with your costs.Plan my start
Words in this journey:Data controller