Data Protection in the Cayman Islands
On 30 September 2019, the Cayman Islands Data Protection Law (DPL) comes into force, introducing globally recognised standards regarding the protection, processing, and access to, an individual’s personal data.
The DPL applies to ‘data controllers’ established in the Cayman Islands, regardless of whether they have a physical presence in Cayman. Where a data controller engages a third party ‘data processor’ to process personal data on its behalf, the data controller must ensure that the third-party service provider also complies with the DPL.