| OVERVIEW |
Herm is a dependency of the United Kingdom. Herm has autonomy in respect of its internal affairs, including data protection. Pursuant to Article 299 of the Treaty establishing the European Community, Herm is a “third country”. |
| ENACTED | 2001 |
| GENERAL PRIVACY LAWS | Data Protection Law of 2001 came into force in 2002. The Law requires data controllers to register with the Data Protection Commissioner and confers certain rights on data subjects. |
| PERSONAL DATA PROTECTION LAWS AND REGULATIONS |
Data Protection Law of 2001 came into force in 2002. The Law requires data controllers to register with the Data Protection Commissioner and confers certain rights on data subjects. Article 17 prohibits processing of personal data without registration with the Data Protection Commissioner. |
| TYPE OF DATA PROTECTED | Personal Information |
| WORKPLACE PRIVACY LAWS | Governed by the Data Protection Law of 2001 |
| TRANSBORDER TRANSFERS | Eighth Principle limits transborder transfer of personal data to countries that provide adequate protection. |
| FINES AND SANCTIONS | Civil and criminal sanctions. |
| OTHER PRIVACY LAWS AND REGULATIONS | No specific bank secrecy law. |