It is extremely important for individuals to understand their rights and how to enforce them in relation to data protection legislation. Equally, it is important for organisations to understand their obligations and how to comply with the law. In particular the requirement to keep data secure. As a committee member of the Channel Islands Information Security Forum (CIISF), whose objectives include protection of information, including personal data, I have the requisite knowledge to effectively provision solutions for organisations and individuals alike in the data protection realm. I was involved in the Data Protection (Jersey) Law 201- consultations where I contributed my views, which helped shape the law. I welcome the new legislation and I believe it will give individuals a significant understanding of their rights and thereby exercise more control over their personal data.