{
  "node_id": "ky-dpl-2017",
  "title": "Cayman Islands Data Protection Law 2017",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "The Cayman Islands enacted the Data Protection Law 2017 (revised 2021), a comprehensive GDPR-aligned statute that came fully into force on 30 September 2019. Administered by the Ombudsman, it establishes eight data protection principles governing the collection, use, storage, and transfer of personal data. Data subjects have rights of access, correction, and objection. Personal data may be transferred internationally only to jurisdictions offering adequate protection or with appropriate safeguards. Data processors must execute written data processing agreements. The law applies to all data controllers established in the Cayman Islands or using equipment in the Cayman Islands for processing personal data.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/ky-dpl-2017.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}