Cayman Islands Data Protection Act
Eight data protection principles modelled on the UK Data Protection Act 1998, in force since 2019.
- Issued by
- Cayman Islands Ombudsman
- Applies in
- Cayman Islands
- Edition
- 2021 Revision
- Area
- Data protection & privacy
What an assessor reads first.
The headline requirements in Amoreg’s catalogue, in the issuer’s own numbering where it has one. They are where a review starts, not a transcription of the text.
- DPP1Fair and lawful processingPrinciples
- DPP3Adequacy and relevancePrinciples
- DPP5RetentionPrinciples
- DPP7SecuritySecurity
- DPP8International transfersTransfers
- BRNBreach notification to the Ombudsman and data subjectsIncidents
How Amoreg keeps you on it.
Enable the Cayman Islands Data Protection Act and add Cayman Islands Ombudsman’s pages as a monitor of your own. Every publication it records keeps its source, stage and date.
Inspector reads your policies against these 6 requirements every week and opens a finding wherever one falls short, citing the rule and drafting the fix. A person decides what is applied.
Each week
- Read Cayman Islands Ombudsman’s pages
- Check the library against 6 requirements
- Open findings with drafted fixes
- Wait for a person to decide
Policy does not yet set out: fair and lawful processing
- Rule
- Cayman Islands Data Protection Act, DPP1
- Area
- Principles
- Proposed by
- Inspector
- Decided by
- A named person, once reviewed
The same ground, elsewhere.
- EU General Data Protection RegulationThe data protection regime for controllers and processors established in, or targeting, the EU.European Union · 9 controls
- UK GDPR & Data Protection Act 2018The UK data protection regime after Brexit, with the ICO as supervisory authority.United Kingdom · 9 controls
- Data Protection (Bailiwick of Guernsey) Law, 2017The Bailiwick's GDPR-equivalent law, with EU adequacy.Guernsey · 9 controls
- Data Protection (Jersey) Law 2018Jersey's GDPR-equivalent law and the Data Protection Authority (Jersey) Law 2018 registration regime.Jersey · 9 controls
- Isle of Man GDPR & LED Implementing Regulations 2018The applied GDPR under the Data Protection Act 2018 (Isle of Man).Isle of Man · 9 controls
- DIFC Data Protection Law No. 5 of 2020The DIFC's GDPR-aligned data protection law, with DPO appointment and notification requirements.UAE — DIFC · 9 controls
Also in Cayman Islands
- Cayman Islands Anti-Money Laundering RegulationsThe AMLRs under the Proceeds of Crime Act, read with CIMA's Guidance Notes — departure from the Guidance Notes without justification is treated as non-compliance.Cayman Islands · 8 controls
- CIMA Rule and Statement of Guidance on Corporate GovernanceCorporate governance requirements for all regulated entities, including funds and their operators.Cayman Islands · 4 controls
- Cayman Islands Mutual Funds Act & Private Funds ActRegistration, audit, valuation, safekeeping and cash-monitoring requirements for Cayman funds.Cayman Islands · 5 controls
- Economic Substance (Crown Dependencies & Overseas Territories)Substance requirements for relevant activities under the EU Code of Conduct Group commitments.Crown Dependencies & Overseas Territories · 4 controls
Questions
Does Amoreg watch for changes to the Cayman Islands Data Protection Act?
Enable it and add the issuer’s pages as a monitor of your own. Every publication the Monitor records keeps its source, stage and date.
Can Amoreg check our policies against the Cayman Islands Data Protection Act?
Yes. Inspector reads your library against its requirements every week and opens a finding, with the rule it cites and a proposed fix, wherever a policy falls short. A person decides what is applied.
Which edition does Amoreg use?
The catalogue records 2021 Revision. Editions were last verified in August 2026, and the Monitor records new publications as they appear.