The Government of Jersey has initiated a two-week consultation period on the draft Cyber Security (Jersey) Law, aiming to reinforce the island’s defences against cyber threats.
The Jersey Cyber Security Centre (JCSC), responsible for safeguarding the island against cyber-attacks, has been at the forefront of these efforts since its establishment by the Council of Ministers in 2021. Formerly known as CERT.JE, the JCSC’s name change underscores its expanded role, encompassing both proactive prevention and reactive response to cyber threats.
Having undergone initial consultation phases in 2022 and 2023, the current draft of the Cyber Security (Jersey) Law reflects insights gathered from stakeholders and the public.
Key provisions of the proposed law include:
- Establishing the Jersey Cyber Security Centre as an independent advisory and emergency response body operating at arm’s length from regulators, law enforcement officers and government
- Changing the funding model for the JCSC so that it becomes a grant-funded body
- Requiring the JCSC to produce an Annual Report and Strategic Plan, which should be available to the public
- Requiring Operators of Essential Services (OES, as defined in the Law) to take appropriate steps to improve and secure their cybersecurity, and notify their customers and JCSC if they experience a significant cyber incident
The consultation, open to the public and stakeholders affected by the law, encompasses entities such as Operators of Essential Services (OES), Operators of Critical National Infrastructure (CNI), and cyber security professionals. Interested parties can participate in the consultation process via the Government of Jersey’s website.
This consultation marks a significant step towards bolstering Jersey’s cyber resilience, underscoring the government’s commitment to safeguarding the island’s digital infrastructure against evolving threats.
The consultation period will remain open for two weeks, allowing ample opportunity for feedback and input from stakeholders before the finalization of the Cyber Security (Jersey) Law.
Matt Palmer (pictured), Director of the Jersey Cyber Security Centre (JCSC) said: “Over the last year, we have worked with the Legislative Drafting Office (LDO) to develop a Law that provides the appropriate balance of autonomy and accountability.
“The consultation in 2022 and 2023 invited views on the principles of the Law: this consultation invites affected organisations and members of the public to provide their views on the substance of the Law. I would welcome any organisations or individuals who work – or are interested – in this area to respond to the consultation before Tuesday 19 March, or attend one of the briefings this week.”
