Guernsey’s Office of the Data Protection Authority (ODPA) has begun an inquiry in relation to a cyber incident reported by The Medical Specialist Group (MSG).
The inquiry follows the ODPA receiving notification of a personal data breach on 8th December 2021.
Since the breach was reported, the ODPA has been in contact with The MSG to assess the nature of the breach, and as result of this preliminary work the ODPA will now be formally investigating MSG under section 69 of The Data Protection (Bailiwick of Guernsey) Law, 2017.
The Law gives the ODPA powers to launch an inquiry at its own discretion and it can launch a formal inquiry where there are concerns about an organisation’s activities or their compliance with the Law. It is not necessary for there to have been a complaint about a Controller or Processor’s activities for this type of inquiry to be commenced.
The ODPA say that the outcome of the inquiry should not be speculated on, or its conclusion pre-judged.
The ODPA invites any affected person who wishes to discuss their concerns in relation to this matter to make contact by e-mail at casework@odpa.gg or by telephone on 01481 742074.
The main picture shows Emma Martins, Guernsey’s Data Protection Commissioner.
