02003D0821 — EN — 17.12.2016 — 001.001

This text is meant purely as a documentation tool and has no legal effect. The Union's institutions do not assume any liability for its contents. The authentic versions of the relevant acts, including their preambles, are those published in the Official Journal of the European Union and available in EUR-Lex. Those official texts are directly accessible through the links embedded in this document

►B COMMISSION DECISION of 21 November 2003 on the adequate protection of personal data in Guernsey (notified under document number C(2003) 4309) (Text with EEA relevance) (2003/821/EC) (OJ L 308 25.11.2003, p. 27)

Amended by:









▼B

COMMISSION DECISION

of 21 November 2003

on the adequate protection of personal data in Guernsey

(notified under document number C(2003) 4309)

(Text with EEA relevance)

(2003/821/EC)







Article 1

For the purposes of Article 25(2) of Directive 95/46/EC, the Bailiwick of Guernsey is considered as providing an adequate level of protection for personal data transferred from the Community.

Article 2

This Decision concerns the adequacy of protection provided in Guernsey with a view to meeting the requirements of Article 25(1) of Directive 95/46/EC and does not affect other conditions or restrictions implementing other provisions of that Directive that pertain to the processing of personal data within the Member States.

▼M1

Article 3

Whenever the competent authorities in Member States exercise their powers pursuant to Article 28(3) of Directive 95/46/EC leading to the suspension or definitive ban of data flows to the Bailiwick of Guernsey in order to protect individuals with regard to the processing of their personal data, the Member State concerned shall, without delay, inform the Commission which will forward the information to the other Member States.

Article 4

1. The Commission shall, on an ongoing basis, monitor developments in the Guernsey legal order that could affect the functioning of this Decision, including developments concerning access to personal data by public authorities, with a view to assessing whether Guernsey continues to ensure an adequate level of protection of personal data.

2. The Member States and the Commission shall inform each other of cases where the action of bodies responsible for ensuring compliance with the standard of protection in Guernsey fails to secure such compliance.

3. The Member States and the Commission shall inform each other of any indications that interferences by Guernsey public authorities responsible for national security, law enforcement or other public interests with the right of individuals to the protection of their personal data go beyond what is strictly necessary, or that there is no effective legal protection against such interferences.

4. Where evidence shows that an adequate level of protection is no longer ensured, including in situations referred to in paragraphs 2 and 3 of this Article, the Commission shall inform the competent Guernsey authority and, if necessary, propose draft measures in accordance with the procedure referred to in Article 31(2) of Directive 95/46/EC with a view to repealing or suspending this Decision or limiting its scope.

▼B

Article 5

The Commission shall monitor the functioning of this Decision and report any pertinent findings to the Committee established under Article 31 of Directive 95/46/EC, including any evidence that could affect the finding in Article 1 of this Decision, that protection in Guernsey is adequate within the meaning of Article 25 of Directive 95/46/EC and any evidence that this Decision is being implemented in a discriminatory way.

Article 6

Member States shall take all the measures necessary to comply with the Decision within four months of the date of its notification.

Article 7

This Decision is addressed to the Member States.