At a business briefing on 14 November 2018, representatives of the Cayman Islands Government (‘CIG’) stated that the Cayman Islands (‘Cayman’) Data Protection Law 2018 would not come in to force in January 2019, as previously advised, but would be delayed until September 2019. This is confirmed on the Cayman Ombudsman website.

What is the Data Protection regime?
The regime will protect the storage and use of personal data by those that hold it. When it comes into force, the Cayman Data Protection Law 2017 (‘the Law’) will affect any individual or organisation established in Cayman which processes personal data, even where the processing is conducted outside Cayman. The Law was passed and published in the Cayman Gazette in 2017, but it is not yet in force.
When was it due to start?
In August 2017 the Cayman Information Commissioner’s Office (‘ICO’) indicated the Law would come into force in January 2019. The ICO's website now confirms the statement by the CIG representatives that it will not now be in force until September 2019.
What is personal data and who processes it?
The Law proposes restrictions on the ‘Processing’ of any ‘Personal Data’ relating to any ‘Data Subject’ by or on behalf of a ‘Data Controller’, who must comply with eight Data Protection Principles. Cayman’s Information Commissioner will monitor their compliance with the Law and will hear, investigate and rule on any complaints.
Where can I find more information?
For more information, including on the exemptions for trusts, public services and corporate finance services and steps you should take to prepare for the new regime, see our earlier article Data Protection is coming to Cayman in January 2019. The Cayman Ombudsman also has more information on its website:

Data Protection Fact Sheet “Ten steps to take now” 
Data Protection Guide for Controllers 
Data Protection Law Summary Fact Sheet

Is this related to the GDPR? 
Although the European Union (‘EU’) General Data Protection Regulation (‘GDPR’) can apply to individuals, private or public entities, outside of Europe, including Cayman entities interacting with EU residents, it is not a Cayman regime. One view expressed by those working in the Data Protection advisory space at the briefing was that any organisation or individual which was already GDPR compliant would be compliant with the Law. For more information on the GDPR see our earlier piece Will your Cayman entity be GDPR ready by 25 May 2018?
Solomon Harris
If you require advice or training on any aspect of the proposals in the Law or are considering a review of your contracts and procedures, contact us on to see how we can help.
The information contained in this article is necessarily brief and general in nature and does not constitute legal advice. Appropriate legal or other professional advice should be sought for any specific matter.


From time to time our firm hosts or sponsors events of interest to our clients. Please join our mailing list if you would like to be notified of upcoming events.

  • Lawyers World Global Awards Solomon Harris
  • World Finance Awards 2012 Solomon Harris
  • IFLR 1000 2011 Recommended Firm
  • 2011 Acquisition Legal Awards
  • ACQ Law Awards 2011 Solomon Harris
  • Corporate Intl Awards Law Firm of the Year Cayman Islands
  • Deal Makers Global Awards
  • Finance Monthly Global Awards 2012 Solomon Harris
  • Solomon Harris wins IFLR Asia Awards
  • Lawyer Monthly
  • The Lawyer Top 30 Offshore
  • Captive Review's Offshore Firm of the Year award
  • IFLR 1000 2014 Recommended Firm

Solomon Harris is a member of AIMA

New Cayman Bill to expand the definition of ‘money laundering regulations’...

If passed into law in its current form, The Monetary Authority (Amendment) Bill, 2019 (‘...

View All Latest News
  Cayman Islands +1 345 949 0488
  Like Solomon Harris on Facebook Follow Solomon Harris on Twitter +1 Solomon Harris Follow Solomon Harris on LinkedIn Contact Us
Cayman Islands +1 345 949 0488
Like Solomon Harris on Facebook Follow Solomon Harris on Twitter +1 Solomon Harris Follow Solomon Harris on LinkedIn
Contact Us