Jersey businesses urged to get basic data protection right

Jersey businesses have been warned there is “no excuse” for failing to put basic safeguards in place to protect customers’ personal information.

Information Commissioner Paul Vane has outlined his priorities for the coming years, with cyber-security, the responsible use of artificial intelligence and children’s privacy among the key areas of focus.

Mr Vane said Jersey could no longer rely on its geographical isolation to protect it from cyber threats, warning that attacks could be launched against local organisations from anywhere in the world.

“There’s a mentality here that, because we’re surrounded by water, we’re automatically protected, nothing can touch us,” he said.

“Sadly we’re not in that age now. A 12-year-old in another country, in their bedroom in their pyjamas, can launch a cyber-attack on a local business.”

He said organisations should at least be meeting the basic requirements of data protection.

“There’s no excuse why an organisation shouldn’t at least have the very basics of data protection right,” he added.

Concerns over AI use

The commissioner’s report also highlighted the growing use of artificial intelligence, calling for businesses and organisations to ensure the technology is used responsibly and ethically.

Particular concerns were raised about AI being used for recruitment, staff performance monitoring and absence management.

The report warned that such applications could create significant privacy concerns, including the misuse of personal information and excessive surveillance of employees.

Protecting children online

Children’s personal information was identified as another priority, particularly as schools increasingly adopt educational technology.

The report said educational technology, or EdTech, was becoming more common in schools, with platforms being used for teaching, personalised learning and organising lessons.

The technology includes AI tutors, assistive tools and educational apps.

While these services can provide clear benefits, the commissioner warned that they can also bring “significant privacy risks”.

Tony Moretta, of Digital Jersey, agreed that strong safeguards were needed but said schools should not be discouraged from using technology responsibly.

He said the debate around online harms risked creating an impression that technology itself was the problem.

“What has sneaked into the conversation is the idea that technology is bad, that you shouldn’t have technology in schools, with a focus on banning technology and things like that,” Mr Moretta said.

He argued that the emphasis should instead be on teaching young people how to use technology safely and effectively.

“There’s a big difference between unhealthy use of social media, doom-scrolling and giving people the skills to use AI responsibly… to solve problems,” he said.

Mr Moretta said responsible use of AI and other digital tools could help equip pupils with skills they would need in the future.