In June 2017, The Data Protection Law (the “DP Law”) was published in the Cayman Islands Official Gazette. The DP Law and Data Protection Regulations, 2018 will come into force on 30 September 20191.

The DP Law establishes a framework of rights and duties designed to safeguard individuals’ personal data, balanced against the need of public authorities, businesses and organisations to collect and use personal data for legitimate purposes. The DP Law was developed in line with international best practices while ensuring that it reflects the specific needs of the Cayman Islands. It is based substantially on the Data Protection Act, 1998 of the United Kingdom.

Most businesses record information in respect of individuals, particularly those who are employees, clients or suppliers, and the obligations under the DP Law will require a detailed review or establishment of policies and procedures in order to achieve compliance. Non-compliance may have serious ramifications.

The DP Law defines “personal data” very widely to include any data which enables a living individual to be identified.

1 Once the DP Law takes effect, enforcement and monitoring will be the responsibility of the newly created office of the Ombudsman.

Maree Martin

Counsel and Head of Knowledge Management - Cayman Islands

Cayman Islands

Stay current with our latest legal insights and subscribe today