Guernsey’s data protection authority has urged businesses to strengthen safeguards around artificial intelligence, warning that organisations remain accountable for protecting customer information even when they rely on external technology providers.
Brent Homan, commissioner of the Office of the Data Protection Authority, said companies must carefully assess how they use AI and ensure third-party providers have adequate security measures in place. He stressed that outsourcing services does not transfer an organisation’s responsibility for safeguarding personal data.
Although Guernsey has yet to record a reported AI-directed data breach, Homan said businesses should establish strong contracts and verify the security practices of companies supplying AI tools.
Matt Palmer, director of Guernsey and Jersey’s cyber security centres, said AI was becoming an established part of the technology landscape. He advocated careful testing, effective controls and a practical approach to adoption, noting that while risks could be managed, AI could never be made entirely risk-free.
The warning comes amid wider debate over the need for stronger oversight of AI as the technology advances. For businesses, the message is clear: adopting AI requires more than embracing innovation; it also demands effective risk management, data protection and accountability.
Leave a comment