Richard Thomas Selected as Chair for Guernsey's New Data Protection Authority
Time 2 Minute Read

Hunton & Williams LLP is pleased to announce that Richard Thomas, Global Strategy Advisor to the Centre for Information Policy Leadership (“CIPL”), has been selected as Chair for the Bailiwick of Guernsey’s new data protection authority. Adding the appointment to his position at CIPL, Thomas will be formally appointed in May and will work with the Data Protection Commissioner and the States of Guernsey to support the island’s regulatory framework in conjunction with the introduction of its new data protection law. Thomas will work on a shadow basis until his formal appointment, and the role is expected to command between 10 and 15 days per year.

Guernsey previously received a finding of adequacy by the European Commission, permitting transfers between the island and the European Union. The new law seeks to update the data protection regime of the island in line with the EU General Data Protection Regulation and to maintain the determination of adequacy. Supporting this effort, Thomas will provide independent advice to the Guernsey Data Protection Commissioner and will chair a board overseeing the activities of the regulator.

Thomas served as UK Information Commissioner from 2002 to 2009. In January 2018, he was appointed to the UK Advisory Committee on Business Appointments and has received numerous awards for his contributions to the data privacy landscape, including “Privacy Leader of the Year” by the International Association of Privacy Professionals.

You May Also Be Interested In

Time 2 Minute Read

On February 23, 2026, a Joint Statement on AI-Generated Imagery was published by 61 data protection authorities. The Joint Statement addresses concerns regarding AI systems capable of generating realistic images and videos depicting identifiable individuals without their knowledge or consent.

Time 5 Minute Read

On November 19, 2025, the European Commission unveiled the much-anticipated digital omnibus legislative package (the “Digital Omnibus”), setting the stage for a new era of digital governance and regulatory simplification across the European Union. According to the Commission, this initiative is designed to enable European businesses to devote more energy to innovation and growth, rather than navigating complex compliance landscapes.

Time 2 Minute Read

On November 17, 2025, the Council of the European Union adopted new rules designed to strengthen cooperation among national data protection authorities, enhancing the enforcement of the EU General Data Protection Regulation.

Time 3 Minute Read

On November 4, 2025, the European Data Protection Board adopted its opinion on the European Commission’s draft decision regarding the adequacy of Brazil’s personal data protection framework. Once finalized, this decision will enable the free flow of personal data from the European Union to Brazil.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page