What are personal data breaches and why should we all care about them?

In this episode Kirsty Bougourd talks to Deputy Commissioner for the Bailiwick of Guernsey, Rachel Masterton, to find out more about what a personal data breach is and why the ODPA has changed the way they are reported.

Every 2 months the ODPA releases the number of personal data breaches reported in the Bailiwick. The way these are reported was changed from 1st January 2022 so that organisations can specify how the breach happened and explain the circumstances that led to the breach. They can also report what the outcome of the breach was, for example the accidental disclosure of personal data.

This means that there is more information available to tell the story behind the breach and reminds us that personal data has a human at the heart.

Rachel explains why these changes have been made and how they give us more information to help prevent breaches from happening in the first place. She also explains how breach reporting works alongside the other duties of the ODPA.

In this episode to mark international Data Protection Day 2022

Bailiwick Data Protection Commissioner, Emma Martins, introduces Kirsty Bougourd's conversation with Charlie Cox, CEO of the Youth Commission. They discuss why it's so important to engage with young people and Kirsty also chats to some members of the YC's Youth Forum. They share their views on what data protection is and how well protected they feel their data is.

Emma also explains why the Office of the Data Protection Authority (ODPA), is joining forces with the Guernsey Youth Commission to extend the reach and impact of its school programme which helps young people understand about personal data, their rights and looking after data safely.

Young people are among the most vulnerable members of our community and they are often the most prolific sharers of their personal data, through online games and activities. It's hoped to bring the messages of caring for personal data properly to a much wider audience through the partnership.

See odpa.gg/schools for more.

Personal data isn't just facts and figures. It's about people and how we look after their data can have far-reaching consequences, especially if we don't do it well.

Personal data is one of the most valuable, non-consumable assets that we own and that data now includes not just passwords and account details but biometric data like our fingerprints, our face and our DNA.

Six months on from the launch of the ODPA's social change initiative - Project Bijou – we discuss what all this means and why the project is so important.

Bailiwick Data Protection Commissioner, Emma Martins, and Tim Loveridge and Kirsty Bougourd of the ODPA, discuss how we all have a role to play in looking after data ethically. They consider why what we do individually is so important and how even a small jurisdiction like the Bailiwick has a vital part to play in the global bigger picture.

(Tim refers to a Finnish schools initiative combatting fake news, you can read more about this here: https://www.weforum.org/agenda/2019/05/how-finland-is-fighting-fake-news-in-the-classroom/)

In May 2021 we launched Project Bijou to try and bring about social and cultural change in everything related to data protection.

Instead of viewing looking after people’s personal data safely as a burden we hope to encourage businesses and individuals to instead see it as a moral responsibility, something as natural as putting on your seatbelt when you get in a car. We want people to understand why the Laws are good for us all so to help explain, the Bailiwick’s Deputy Data Protection Commissioner, Rachel Masterton, talks us through the ten rights we have under the Law. And in doing so attempts to answers the important question, “What has Data Protection ever done for us?”.

In this episode, we're joined by Callie Loveridge and Aaron Le Noury, who we've invited to the podcast as part of Project Bijou.

Callie is the States of Guernsey's Head of Data Protection and Aaron is a Data Protection Officer within her team. In this podcast they discuss their roles in the machinery of government and the challenges associated with ensuring public administration is carried out in accordance with the Data Protection Law.

Project Bijou is a social initiative we launched in May 2021 in the Bailiwick of Guernsey. With this project we’re encouraging everyone to share stories, knowledge and experiences relating to ethical data use, in a way that benefits everyone. The project aims to support and nurture positive cultural change around how people and organisations treat people’s data. We hope to engage people on a cultural level, a level that goes beyond law. You can find out more at odpa.gg/bijou.

In this episode, we're joined by Vicky Le Poidevin, who we've invited to the podcast as part of Project Bijou.

Vicky is a Director of Offshore Consultancy & Training Limited. She tells us her personal story of how she ‘got’ data protection, and how it has changed her approach to work. She details the time spent working in our team, project managing our website redevelopment project in 2020, and how being immersed in a culture where data protection lives and breathes changed her outlook further. Her focus on the human beings at the heart of data protection legislation and preventing them from being harmed is absolutely key.

Project Bijou is a social initiative we launched in May 2021 in the Bailiwick of Guernsey. With this project we’re encouraging everyone to share stories, knowledge and experiences relating to ethical data use, in a way that benefits everyone. The project aims to support and nurture positive cultural change around how people and organisations treat people’s data. We hope to engage people on a cultural level, a level that goes beyond law. You can find out more at odpa.gg/bijou.

In this podcast Annabel Nicholas and Matt Loaring discuss data use and organisational culture within the midwifery and paediatrics team that Annabel leads.

We’ve invited Annabel and Matt to the podcast as part of Project Bijou. Annabel led a period of significant change and improvement in Guernsey’s maternity services, and because Project Bijou is all about shifting cultures and behaviours for the better, we want to hear how she did this, so that others looking to engage their own teams in adopting positive changes can learn from her experience. What we learn is that culture change, and data protection, doesn't have to be complicated - it can be common sense and as simple as treating people well.

Project Bijou is a social initiative we launched in May 2021 in the Bailiwick of Guernsey. With this project we’re encouraging everyone to share stories, knowledge and experiences relating to ethical data use, in a way that benefits everyone. The project aims to support and nurture positive cultural change around how people and organisations treat people’s data. We hope to engage people on a cultural level, a level that goes beyond law. You can find out more at odpa.gg/bijou.

In this episode, we're joined by Huw Thomas, who we've invited to the podcast as part of Project Bijou.

Huw is Counsel at law firm Carey Olsen. He tells a story that illustrates that no-one is immune from making mistakes and that businesses need to think differently about how they manage behavioural risk.

Huw argues that educating staff about taking care of personal data needs to be done better: to take full account of how people actually behave, rather than how businesses would like them to behave. He suggests making use of people within your business who understand how people behave to help write shorter, actionable policies and procedures around use of data. He concludes that taking good care of personal data makes good business sense for us as a jurisdiction, as it protects our key financial services sector.

Project Bijou is a social initiative we launched in May 2021 in the Bailiwick of Guernsey. With this project we’re encouraging everyone to share stories, knowledge and experiences relating to ethical data use, in a way that benefits everyone. The project aims to support and nurture positive cultural change around how people and organisations treat people’s data. We hope to engage people on a cultural level, a level that goes beyond law. You can find out more at odpa.gg/bijou.

In this short podcast we're joined by Richard Hanrahan who we’ve invited to the podcast as part of Project Bijou.

Richard is CEO of Agilisys Guernsey. He discusses Agilisys’ role in the States of Guernsey’s digital transformation project, how it’s going to shift delivery of public service, and how to look after people’s data along the way.

Richard recognises the part we all have to play as individuals in valuing our data, and being aware of the different ways organisations might treat us and our data. He also highlights the role of culture in getting people to talk about, think about, and track the careful use of people’s data. Richard emphasises the need to build in respect for people’s data at the outset, and for it to be an intrinsic part of how an organisation works. He concludes on the potentially difficult choices we will all have to make as we move into a future of personal data being increasingly processed by AI, and the ethical issues that arise.

Project Bijou is a social initiative we launched in May 2021 in the Bailiwick of Guernsey. With this project we’re encouraging everyone to share stories, knowledge and experiences relating to ethical data use, in a way that benefits everyone. The project aims to support and nurture positive cultural change around how people and organisations treat people’s data. We hope to engage people on a cultural level, a level that goes beyond law. You can find out more at odpa.gg/bijou.

In this podcast Simon Entwisle, a member of Guernsey’s Data Protection Authority, talks about the role of regulation, and what advantages there are to smaller jurisdictions, such as the Bailiwick.

He observes that most organisations want to look after people’s data well, and that most regulators recognise those good intentions. He warns against slipping into well-intentioned complacency – it’s essential that businesses keep up-to-date with what’s required of them.

Finally, Simon underlines the role of the regulator in demystifying the legislation, to make it relevant, and understandable as widely as possible – and how that’s what Project Bijou is all about.

Project Bijou is a social initiative we launched in May 2021 in the Bailiwick of Guernsey. With this project we’re encouraging everyone to share stories, knowledge and experiences relating to ethical data use, in a way that benefits everyone. The project aims to support and nurture positive cultural change around how people and organisations treat people’s data. We hope to engage people on a cultural level, a level that goes beyond law. You can find out more at odpa.gg/bijou.