Tougher cyber security draft law approved by States

A new law has been approved by the States to increase Jersey's protection against cyber attacks.

If it passes the Privy Council, the draft Cyber Security (Jersey) Law will require organisations described as Operators of Essential Services (OES) to improve their levels of cyber security.

It will also give the Jersey Cyber Security Centre (JCSC) - an arm's length advisory and emergency response group - legal status.

The JCSC, which will help organisations make the changes before the law comes into force, said the approval of the law marked "a significant landmark" for Jersey.

The main effect of the law will be on organisations working in a range of sectors, including energy, water, transport, food production and retail, postal and courier services, health, telecommunications, public communications, financial services, and public administration.

These groups will be expected to register as an OES with the JCSC, make the improvements, and then commit to reporting any significant cyber incidents to the body within 24 hours of becoming aware of them.

"The approval of this law is a significant landmark for the island, and for us," said Matt Palmer, director of JCSC.

"As well as focusing on improving the cyber resilience of our key services, the law also makes JCSC's status and role clearer.

"This will make it easier for us to collaborate with Operators of Essential Services in a constructive and confidential way," he said.

Follow BBC Jersey on X and Facebook. Send your story ideas to channel.islands@bbc.co.uk.