The Office of the Data Protection Authority has reported improved investigative performance, increased community engagement and a more proactive approach to enforcement in its latest annual report.
The report highlights a significant increase in workload during 2025, alongside improvements in productivity and case handling. It also details the introduction of the Authority’s Assertive Agile Enforcement framework, designed to resolve issues more quickly while maintaining strong protections for individuals’ data rights.
The new approach focuses on early resolution, constructive engagement and proportionate use of formal powers, while allowing the Authority to take decisive action where risks are higher. The framework was used in investigations involving Jacksons and Medical Service Group, which resulted in sanctions.
The report also sets out the Authority’s new Strategic Plan for 2026-2029, which aims to strengthen data protection across the Bailiwick through education, support for the digital economy and proportionate regulatory action.
Data Protection Commissioner Brent Homan said: “The Strategic Plan makes clear our commitment to elevating data protection in the Bailiwick by educating and equipping society, supporting a modern, safe and progressive digital economy, and responding to non-compliance proportionally, through Assertive, Agile Enforcement.”
Alongside its regulatory work, the Authority expanded its education programmes, community outreach activities and international partnerships during the year.
Outgoing Chairman Richard Thomas CBE said: “Any Data Protection Authority must be judged by the outcomes it achieves across a wide range of responsibilities. This Annual Report is a record of the main outcomes achieved in 2025. It tells stories and it sets out the numbers which show significantly heavier workloads and improved productivity.”
