(8) Sixteen statutory instruments (orders) have also been adopted in Guernsey in 2002, laying down specific rules concerning issues such as subject access, processing of sensitive data and notification to the data protection authority. These instruments complement the law.