This guide outlines the critical amendments to the Cayman Islands’ Common Reporting Standard (CRS) Regulations, introduced by the Tax Information Authority (International Tax Compliance) (Common Reporting Standard) (Amendment) Regulations, 2025, here. These changes represent a significant shift in the compliance landscape, aligning the jurisdiction with global OECD standards and the new Crypto-Asset Reporting Framework (CARF).

As these amendments are directly relevant to our practice, it is essential that we understand the new timelines, expanded scope, and procedural requirements to advise our clients effectively.

1. New deadlines for registration and reporting

One of the most immediate impacts for our clients is the consolidation and advancement of compliance deadlines. The previous split deadlines for returns and compliance forms have been harmonised to streamline the process.

Registration for New FIs

• New Deadline: Entities that become Financial Institutions (FIs) on or after 1 January 2026 must register on the DITC Portal by 31 January of the following year (i.e. 31 January 2027 onwards).

Annual reporting deadlines

• Consolidated date: From the 2026 reporting year onwards, both the CRS return and the CRS compliance form are due by 30 June annually.
• Impact: This replaces the previous separate deadlines (31 July for returns and 15 September for compliance forms).
• First filing: For the 2026 reporting period, both documents must be submitted by 30 June 2027.

2. Principal Point of Contact (PPoC) requirements

A major procedural change is the stricter requirement regarding the PPoC. The DITC now mandates that the PPoC must have a physical presence within the jurisdiction.

• Requirement: Every Cayman FI must appoint a PPoC person (natural or legal) located in the Cayman Islands.
• Address: The PPoC must have a physical address in the Cayman Islands; a mailing address alone is insufficient.
• Deadlines for compliance:
  • New FIs (from 1 Jan 2026): Must appoint a Cayman-based PPoC immediately upon registration.
  • Existing FIs (registered before 31 December 2025): Have a transitional period until 31 January 2027 to appoint a local PPoC and update their details on the DITC Portal. Note: This deadline was extended from the original 1 January 2027 date.
• Notification: Any changes to the PPoC must be notified to the DITC within 30 days.

3. Expanded scope: Crypto-assets and digital money

To modernise the framework, the definition of "Financial Assets" has been significantly broadened. This change ensures that the Cayman Islands' regime captures digital assets, mirroring the OECD’s Crypto-Asset Reporting Framework (CARF).

New inclusions

The regulations now formally include:

• Crypto-assets: This covers payment tokens (e.g., Bitcoin, stablecoins), utility tokens, certain NFTs, and security tokens.
• Specified electronic money products.
• Central bank digital currencies.

Client impact

Entities dealing in these assets must re-evaluate their classification to consider whether they now fall under the definition of an FI or have new reporting obligations regarding account holders holding these assets. Due diligence procedures for both new and existing FIs must be updated to capture and report on these asset types effectively.

4. Enhanced data collection and enforcement

The amendments introduce more granular data requirements and a stricter penalty regime.

Data requirements

• Controlling persons: FIs must collect and report additional information regarding Controlling Persons, i.e. any natural person who exercises control over an entity.
• Account classifications: There is a requirement for more detailed account classification data.
• Self-certifications: Valid self-certifications are critical. They must be collected from users to determine tax residency by 1 January 2027 for pre-existing accounts, and prior to (or upon) establishing a relationship for new accounts.

Enforcement and penalties

• Immediate penalties: The DITC has the authority to impose administrative penalties immediately for non-compliance, removing the previous "breach notice" buffer.
• Penalty Amounts: Failure to file returns or update PPoC details can result in penalties of up to US$12,200 (CI$10,000) per breach.
• Scope: Penalties apply to missed filing deadlines, failure to maintain current registration details, and failure to establish valid self-certifications.

5. Transitional provisions summary

To assist in managing client expectations, here is the timeline for the transition:

6. CIMA prudential information survey for registered persons

In addition to the CRS amendments, Registered Persons should be aware of new regulatory obligations introduced by the Cayman Islands Monetary Authority (CIMA). The Prudential Information Survey (ADR-046-75-02) is now required for entities registered as Registered Persons and is a critical part of CIMA’s ongoing supervisory and risk assessment objectives.

Purpose and scope

• The survey aims to enhance CIMA’s oversight of the securities investment business sector, focussing on activities, exposures, and risk profiles across Registered Persons.
• It is separate from, and in addition to, existing requirements such as the Annual Declaration.

Key deadlines

• The first Prudential Information Survey covers the reporting period from 1 January 2025 to 31 December 2025.
• Submission is required via the REEFS portal between 1 January 2026 and 31 March 2026.

Submission requirements

• Registered Persons must accurately complete and submit the survey within the specified window.
• The Guidance for Registered Person Prudential Information Survey is available and should be consulted for technical and procedural details.
• Timely submission is mandatory. This obligation is in addition to the Annual Declaration (ADR-046-75), which remains due from 1 January 2026 to 15 January 2026.

Failure to meet either obligation may result in regulatory follow-up and penalties. Any queries are to be directed to the Securities Supervision Division at CIMA.

Action points for the team

1. Review client portfolios: Identify clients dealing in digital assets who may now fall under the expanded scope.
2. Audit PPoC appointments: Ensure all existing FI clients have a plan to appoint a Cayman-based PPoC before the January 2027 deadline.
3. Update compliance calendars: Adjust internal tracking systems to reflect the new 30 June consolidated deadline for 2027.