Initial enforcement of the Cayman Islands data protection regime

The Cayman Islands Data Protection Law came into force on 30 September 2019 and all Cayman Islands data controllers need to ensure they are now compliant with the new data protection regime in the Cayman Islands.

The Cayman Islands Office of the Ombudsman is the supervisory authority for data protection related matters and is responsible for enforcement of the Data Protection Law.

We understand from the Attorney General of the Cayman Islands that in the initial six months of the new data protection regime the main focus of the Office of the Ombudsman will be to assist entities to put in place mechanisms to comply with the Data Protection Law. During this period monetary penalties will be reserved for the most serious breaches of the Data Protection Law and an informal resolution of any breaches will be the initial approach of the Office of the Ombudsman.

We published this client alert and this client guide explaining what a Cayman Islands data controller must do in order to comply with the new regime. If you have not yet put in place the necessary documentation and processes to comply with the Data Protection Law, please contact your usual Harneys representative.