Jersey Resolution Authority

Responsible for minimising the impact of a bank failure in the island and ensuring public funds are protected

Data protection policy

Processing of Personal Data

We process personal data in order to satisfy our statutory functions, and in particular:

  • to maintain emergency contact details for directors and senior management of banks and other authorities for use in preparation for or to facilitate a bank resolution;
  • to understand and consider the nature and extent of banks’ significant customer relationships in preparation for or to facilitate a bank resolution;
  • to understand and consider the nature and extent of banks’ significant third-party relationships in preparation for or to facilitate a bank resolution;
  • to determine the probity and competence of our workforce (including individuals that have applied for employment in the JRA).

In addition, we may occasionally be required by law to process personal data to comply with the requirements of departments of the Government of Jersey. Personal data may also be processed for our suppliers and others with whom we conduct business.

As part of our administration of our employees, third parties under our direction may carry out some processing of personal data.

Personal data that is processed by us under our statutory functions cannot be disclosed to another party unless permitted by legislation. In particular, legislation provides for us to share personal data with various parties and authorities in Jersey and overseas.

We may continue to hold personal data after an individual ceases to be an officer or employee of the JRA, so that we may deal with any matters that may subsequently arise with respect to that individual.

How we protect privacy of personal data

Notwithstanding the statutory obligations imposed on the us (and others) under the Data Protection (Jersey) Law 2018 (the Data Protection Law), we consider that the fair and accurate processing of personal data is important to the achievement of our objectives, to the success of our operations, and to maintaining confidence in the JRA.

This means that we will:

  • collect personal data fairly
  • tell you why we are collecting personal data and how we will use it
  • use personal data only to comply with our statutory functions or for operational purposes related to those statutory functions and to comply with legislation
  • ensure that the personal data collected and held is accurate and, where necessary, kept up to date
  • hold personal data only for so long as is necessary
  • keep personal data secure
  • share personal data only with other agencies by adopting practices that will keep it secure
  • ensure that individuals can exercise rights under the Data Protection Law including the right to request access to the personal data held on that individual and
  • respond to requests for inaccurate personal data to be corrected.

Security of processing

We have taken appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, or accidental loss or alteration, and unauthorised disclosure or access (including where the process involves transmission of personal data over a network) and against all other unlawful forms of processing.

In particular, we take measures that are intended to ensure that:

  • everyone managing and handling personal data understands that they are contractually responsible for following good data protection practice
  • everyone managing and handling personal data is appropriately trained to do so
  • everyone managing and handling personal data is appropriately supervised.

Outsourcing to a data processor

Where the processing of personal data has been outsourced to a third party, such outsourcing shall be undertaken in line with a written agreement between us and the third party and shall specify the rights and obligations of each party. In particular, the agreement shall state that the third party has adequate security measures in place and shall only process personal data on the specific written instruction from us.

The third party shall carry the same obligations, as we are required to observe, under the Data Protection Law.

Individuals’ rights

Under the Data Protection Law, you have rights as an individual, which you can exercise in relation to the information we hold about you. These include the right to request that inaccurate personal data we hold about you is corrected, and the right to access your personal data. To request your personal data you should make a written 'subject access request' to:

Data Protection Officer:
Jersey Resolution Authority
14 – 18 Castle Street
St Helier
Jersey
JE4 8TP

This right is subject to certain exemptions. We would encourage you to find out more about your rights by visiting the Office of the Information Commissioner's website.

If you have any queries in relation to this policy, contact the JRA Data Protection Officer at the above address.

Privacy policy

Our key responsibilities are set out in the Bank (Recovery and Resolution) (Jersey) Law 2017 (the Resolution Law).

To meet these requirements, we must pay particular attention to our guiding principles:

  • reducing risk to the public of financial loss due to the financial unsoundness of banks;
  • protecting and enhancing the reputation and integrity of Jersey in commercial and financial matters; and
  • safeguarding the best economic interests of Jersey.

Meeting these requirements, and fulfilling our role as an effective resolution authority, means that we need to use information that we collect about individuals (personal data).

This notice tells you what to expect when we collect personal data from a range of people, including:

  • respondents to our surveys and consultations
  • individuals connected with entities to which the Resolution Law applies
  • job applicants and employees
  • people who contact us

It also lets you know how you can contact us to find out more about our approach to privacy by understanding:

  • your rights
  • how to make complaints or raise your concerns
  • how to contact us

Respondents to our Surveys and Consultations

When conducting our surveys we try to keep our collection of personal data to a minimum. We use anonymised data as far as possible and only ask for personal data where we believe it is necessary for the purpose of the research exercise in question. An individual’s participation in surveys, consultations and market research activities is their choice, and if asked they may refuse to participate.

The type of personal data that we typically use as part of our research is normally limited to contact details (of the person completing a questionnaire or survey or responding to a consultation) and personal views and opinions of consumers and those who submit questionnaires, surveys and consultation responses to us.

Individuals connected with entities to which the Resolution Law applies

We use personal data that we collect about individuals who are connected with entities to which the Resolution Law applies so that we can perform our statutory functions effectively.

As a responsible resolution authority we may sometimes need to share your personal data with overseas resolution authorities, regulators, law enforcement agencies and other third parties. This may include third parties who are located outside of the European Economic Area.

All of the personal data we collect is held securely. However, in certain limited circumstances, we may make personal data that we collect publicly available in order to fulfil our statutory functions. Where information is made publicly available we cannot provide any guarantees as to how it may be used by third parties who access it.

Job applicants and employees

The information that is provided to us as part of a job application process will be held securely and only used for the purpose of progressing your application, or to comply with legal or regulatory requirements.

We maintain files on our employees. The information that is collected is held securely and only used for purposes related to that individual’s employment, or to comply with legal or regulatory requirements.

Information shared with us

Any information that is sent to us, whether in electronic or paper form, may be monitored and used by us for reasons of security and monitoring compliance with applicable laws, regulations and our internal policies.

Where you make a complaint you should be aware that in certain circumstances it may be shared with third parties, and your identity could be disclosed.

Your rights

Under the Data Protection (Jersey) Law 2018, you have rights as an individual which you can exercise in relation to the information we hold about you. These include the right to request that inaccurate personal data we hold about you is corrected, and the right to access your personal data. To request your personal data you should make a written ‘subject access request’. This right is subject to certain exemptions. To make a subject access request please write to:

Data Protection Officer
Jersey Resolution Authority
14-18 Castle Street
St Helier
Jersey JE4 8TP

We would encourage you to find out more about your rights by visiting the Office of the Information Commissioner website.

Making a complaint or raising a concerns

If you wish to make a complaint please write to:

Head of the JRA
Jersey Resolution Authority
14-18 Castle Street
St Helier
Jersey JE4 8TP

Or, if your complaint is in relation to the Head of the JRA, write to the Chair at the above address.

Data protection

Find out more about our approach to data protection in our data protection policy.

More information about our processing of personal data can also be found on the Office of the Information Commissioner's website.