The Data Protection Act 2017 and the Data Protection Regulations
2018 came into force on 30 September 2019. Persons established or
processing personal data in the Cayman Islands must ensure that
they are compliant with the data protection regime.
1 Introduction
The Data Protection Act, 2017 (the DPA) came
into force on 30 September 2019, together with the Data Protection
Regulations, 2018 (the Regulations). Persons
established or processing personal data in Cayman Islands must
ensure that they are compliant with the DPA's requirements.
This Guide aims to provide readers with a basic understanding of
Cayman's data protection legislation. The DPA does include a
number of, sometimes conceptually difficult, defined terms and, for
ease of reference, certain of those definitions have been
duplicated in Schedule 1 to this Guide. We also refer readers to
the Guide to Data Protection Act 2017 for Data Controllers (the
Guidance) published by the Cayman Ombudsman.
