News
Print Article

Jersey Cyber Law is approved [Jan 2026]

23/01/2026

The States Assembly has unanimously approved the Cyber Security (Jersey) Law 202-. It now goes to the Privy Council, and, subject to that final step, we expect it to come into effect this summer [2026].

OVERVIEW

  • The biggest impact of the proposed law will be on organisations which are deemed to provide "essential services" for the island,  
  • Essential services in Jersey include energy, transport, finance, health, water, telecoms/public communications, digital services, food production and retail,  banks, utilities, GPs and government services
  • Essential services will be legally obliged to
    • "Appropriate and proportionate" security measures to identify threats, reduce risk, prepare for incidents and keep services running.
    • To report significant cyber incidents to JCSC within 24 hours of becoming aware of them.
  • Essential services could otherwise be fined up to £10,000 under new legislation approved by the States Assembly.
  • The Cyber Security Law was proposed in November, as a framework for strengthening the island's resilience against cyber threats and safeguarding critical infrastructure.
  • It makes the existing Jersey Cyber Security Centre a national authority that will issue guidance and standards organisations should follow.

Visit the State Assembly website for a full background

The main effect of the Law

  • Clarifying JCSC’s legal position and
  • Place additional requirements on organisations that are classified as Operators of Essential Services (OES).

For financial services, banks are caught.

OES will be required to:

  1. Register as an OES with the JCSS
  2. Put in place appropriate cyber security measures
  3. Report any significant cyber incidents to JCSC within 24 hours of becoming aware of them, including key information

You can check whether your organisation is an OES. You can visit the Cyber Law Hub on the JCSS website to find the thresholds for your sector.

If you are not sure whether you will be an OES, please get in touch with the JCSS, and we can provide advice.

Jersey Cyber Security Centre [JCSS] IS HOLDING WORKSHOPS

  • In February, the JCSS will be holding workshops where it will work with OES sectors to tailor the JCSS approach to industry needs and develop guidance and advice to support them in preparing for the Law coming into effect later this year.

If you’re an OES, you can also use these workshops to ask further questions and inform the work we do over the coming months.

o          Friday 6 February: Energy and Water (12:30 - 14:00)

o          Friday 6 February: Digital Sector (14:30- 16:00)

o          Thursday 12 February: Transport, Postal, Courier and Food (10:30 - 12:00)

o          Thursday 12 February: Digital Services (13:00 - 14.30)

o          Thursday 19 February: Public Administration (10:00 - 11:30)

o          Thursday 19 February: Telecommunications (12:30 - 14:00)

o          Thursday 26 February: Parishes (10:00 - 11:30)

  News Links

  1. Channel 103 — “Cyber security law passed”

This is the clearest news report confirming the law's unanimous approval and its expected entry into effect later this year.
🔗 https://www.channel103.com/news/jersey/cyber-security-law-passed/ [channel103.com]

  1. States Assembly — Proposition P.107/2025 (Official Document)

While not a news article, it is the official State Assembly publication showing the draft law and debate timeline.
🔗 https://statesassembly.je/publications/propositions/2025/p-107-2025 [statesassembly.je]

  1. Comsure — Announcement of Lodging & Debate Timeline (Nov 2025)

Covers the background and legislative context of the Cyber Security (Jersey) Law ahead of approval.
🔗 https://www.comsuregroup.com/news/nov-21-2025-the-cyber-security-jersey-law-was-lodged-and-will-be-debated-by-the-states-assembly-next-year/ [comsuregroup.com]

  1. Jersey Cyber Security Centre (JCSC) — “Law lodged to improve Jersey’s cyber security”

Provides context on the law’s purpose, OES requirements, and implementation expectations.
🔗 https://jcsc.je/latest/news/law-lodged-to-improve-jerseys-cyber-security/ [jcsc.je]

JERSEY CYBER DATA PROTECTION

The Team

Meet the team of industry experts behind Comsure

Find out more

Latest News

Keep up to date with the very latest news from Comsure

Find out more

Gallery

View our latest imagery from our news and work

Find out more

Contact

Think we can help you and your business? Chat to us today

Get In Touch

News Disclaimer

As well as owning and publishing Comsure's copyrighted works, Comsure wishes to use the copyright-protected works of others. To do so, Comsure is applying for exemptions in the UK copyright law. There are certain very specific situations where Comsure is permitted to do so without seeking permission from the owner. These exemptions are in the copyright sections of the Copyright, Designs and Patents Act 1988 (as amended)[www.gov.UK/government/publications/copyright-acts-and-related-laws]. Many situations allow for Comsure to apply for exemptions. These include 1] Non-commercial research and private study, 2] Criticism, review and reporting of current events, 3] the copying of works in any medium as long as the use is to illustrate a point. 4] no posting is for commercial purposes [payment]. (for a full list of exemptions, please read here www.gov.uk/guidance/exceptions-to-copyright]. Concerning the exceptions, Comsure will acknowledge the work of the source author by providing a link to the source material. Comsure claims no ownership of non-Comsure content. The non-Comsure articles posted on the Comsure website are deemed important, relevant, and newsworthy to a Comsure audience (e.g. regulated financial services and professional firms [DNFSBs]). Comsure does not wish to take any credit for the publication, and the publication can be read in full in its original form if you click the articles link that always accompanies the news item. Also, Comsure does not seek any payment for highlighting these important articles. If you want any article removed, Comsure will automatically do so on a reasonable request if you email info@comsuregroup.com.