Jersey: technology regulation at a glance

Framework: No dedicated comprehensive crypto statute. Crypto is treated as an asset class within Jersey's existing financial services laws and AML/CFT/CPF regime: VASP registration under the Proceeds of Crime (Supervisory Bodies) (Jersey) Law 2008 and Proceeds of Crime (Jersey) Law 1999 (supervised by the Jersey Financial Services Commission), token offerings under the Control of Borrowing (Jersey) Order 1958, and the JFSC's 2024 Tokenisation of Real World Assets guidance. Tax follows gov.je income-tax guidelines.

Crypto is legal in Jersey and actively supervised, but through a patchwork of in-force existing frameworks rather than a single dedicated crypto law, Jersey deliberately chose not to enact crypto-specific legislation. Virtual asset service providers (VASPs) must register with the JFSC for AML/CFT supervision (mandatory since 2016, expanded in 2023), token offerings require COBO consent and a prospectus/white paper, and a 2024 JFSC guidance note governs tokenisation and stablecoins. The regime is FATF-aligned and Jersey is implementing the OECD Crypto-Asset Reporting Framework (CARF) from 1 January 2026.

Framework: AI Playbook for Jersey (Digital Jersey, 2024) + Jersey AI Council (est. November 2025) + Data Protection (Jersey) Law 2018 applied to AI activities

Jersey (Crown Dependency) has enacted no AI-specific legislation and has no comprehensive bill before the States Assembly. Governance is delivered through the non-binding 'AI Playbook for Jersey' published by Digital Jersey and the Jersey AI Council, a multi-stakeholder coordination body established in November 2025 with no policy or decision-making mandate. The Data Protection (Jersey) Law 2018, which mirrors the EU GDPR and holds EU adequacy status, provides the primary legal constraint on AI processing of personal data.

Framework: Data Protection (Jersey) Law 2018 & Data Protection Authority (Jersey) Law 2018, supervised by the Jersey Office of the Information Commissioner (JOIC)

Jersey operates a comprehensive, GDPR-aligned data protection regime under the Data Protection (Jersey) Law 2018, which entered into force on 25 May 2018. The island holds an EU adequacy decision (originally granted 2008, reaffirmed January 2024) and a UK GDPR adequacy designation, enabling free personal-data flows from both the EU and the UK. An independent supervisory authority, the Jersey Office of the Information Commissioner, enforces the law with full investigatory, corrective, and sanctioning powers.

Framework: Financial Services (Jersey) Law 1998, Money Service Business (MSB) class, supervised by the Jersey Financial Services Commission (JFSC); virtual-asset and lending businesses register for AML under the Proceeds of Crime (Supervisory Bodies) (Jersey) Law 2008.

Jersey operates an in-force licensing regime for digital payments: payment transmission, bureau de change and electronic money are regulated as 'money service business' under the Financial Services (Jersey) Law 1998, requiring registration with and supervision by the JFSC. There is no bespoke EU-style PSD2/e-money-directive framework, no open banking regime, and no specific Buy-Now-Pay-Later/consumer-credit licensing, lending and crypto activities are caught mainly through AML registration rather than a dedicated payments rulebook.

Framework: Control of Housing and Work (Jersey) Law 2012; Jersey Immigration Rules (last updated 14 February 2025); High Value Residency scheme administered by the Chief Minister's Department

Jersey (a British Crown Dependency) has no dedicated digital nomad or remote-worker visa. Remote relocators must use existing pathways: British and Irish citizens may move freely but acquire residential status incrementally; non-British/Irish nationals require employer-sponsored work permits; and high-net-worth individuals can obtain immediate 'Entitled' residential status via the High Value Residency (HVR) scheme. Self-employment is tightly restricted to those already holding Entitled status or in exceptional cases.

Framework: No comprehensive online safety law in force; draft Online Harms (Content Removal and Online Privacy) Law under development following public consultation closed March 2026; existing patchwork of criminal law and data-protection rules (Data Protection (Jersey) Law 2018)

Jersey, as a Crown Dependency, did not adopt the UK Online Safety Act 2023 and has no equivalent comprehensive online safety statute in force. A November 2025 scrutiny review concluded that children in Jersey have materially weaker online protections than their UK or EU counterparts, with no platform accountability rules and no age-verification requirements for adult content. The government launched a public consultation on draft content-removal and online-privacy legislation in January 2026 (closed 6 March 2026), with a full bill intended as a legislative priority for 2026.

Framework: Cyber Security (Jersey) Law 202- (passed by States Assembly 22 January 2026, pending Privy Council assent, commencement expected summer 2026); Jersey Cyber Security Centre (JCSC) as national authority; Jersey Financial Services Commission (JFSC) Codes of Practice for registered financial-services firms

Jersey's States Assembly unanimously enacted the Cyber Security (Jersey) Law on 22 January 2026, the island's first standalone cybersecurity statute, establishing the JCSC as the national cybersecurity authority and imposing mandatory obligations on Operators of Essential Services (OES) across ten sectors. The law awaits Privy Council approval before commencement, expected in summer 2026. Pre-existing JFSC Codes of Practice already impose proportionate cyber risk-management duties on all registered financial-services firms.

Framework: Companies (Jersey) Law 1991, administered by the Jersey Financial Services Commission (JFSC); supported by Control of Housing and Work (Jersey) Law 2012; Control of Borrowing (Jersey) Order 1958 (being phased out under 2026 amendments)

Jersey (a British Crown Dependency) is a well-established offshore financial centre with a streamlined company formation process governed by the Companies (Jersey) Law 1991 and administered by the JFSC. There are no foreign ownership restrictions and no statutory minimum share capital, making the jurisdiction highly accessible to foreign investors. Non-residents typically incorporate through a JFSC-regulated service provider and must comply with beneficial ownership disclosure requirements; most operating businesses also require a business licence from the Government of Jersey.