The Data Protection Act 2017 and the Data Protection Regulations 2018 came into force on 30 September 2019. Persons established or processing personal data in the Cayman Islands must ensure that they are compliant with the data protection regime.

1 Introduction

The Data Protection Act, 2017 (the DPA) came into force on 30 September 2019, together with the Data Protection Regulations, 2018 (the Regulations). Persons established or processing personal data in Cayman Islands must ensure that they are compliant with the DPA's requirements.

This Guide aims to provide readers with a basic understanding of Cayman's data protection legislation. The DPA does include a number of, sometimes conceptually difficult, defined terms and, for ease of reference, certain of those definitions have been duplicated in Schedule 1 to this Guide. We also refer readers to the Guide to Data Protection Act 2017 for Data Controllers (the Guidance) published by the Cayman Ombudsman.

Download >> The Cayman Islands Data Protection Act, 2017

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.