About Loeb Smith
People
Sectors
Expertise
- Legal Service
- Banking and Finance
- Blockchain, Fintech and Cryptocurrency
- Capital Markets and Privatization
- Corporate
- Cybersecurity and Data Privacy
- Insolvency, Restructuring and Corporate Recovery
- Insurance and Reinsurance
- Intellectual Property
- Investment Funds
- Litigation and Dispute Resolution
- Mergers and Acquisitions
- Private Client and Family Office
- Private Equity and Venture Capital
- Governance, Regulatory and Compliance
- Entity Formation and Managed Services
- Consulting
- Legal Service
News and Announcements
Locations
Subscribe Newsletters
Contact
The Private Funds Law, 2020 (the “Law“) came into force on 7th February 2020 and introduces, among other things, a requirement for the registration of closed-ended funds (typically, investment funds which do not grant investors with a right or entitlement to withdraw or redeem their shares or interests from the fund upon notice) with the Cayman Islands Monetary Authority (“CIMA“). The Law refers to these closed-ended funds as “Private Funds”. Mutual funds (e.g. open-ended funds) are not caught by the Law and continue to be regulated by the Mutual Funds Law (2020 Revision) as amended. Accordingly, there is now a regulatory regime in the Cayman Islands for all mutual funds and a separate regulatory regime for “private funds” covered by the Law.
What is a “Private Fund”?
A “Private Fund” means a company, unit trust or partnership whose principal business is the offering and issuing of its investment interests, the purpose or effect of which is the pooling of investor funds with the aim of spreading investment risks and enabling investors to receive profits or gains from such entity’s acquisition, holding, management or disposal of investments, where:
- the holders of investment interests do not have day-to-day control over the acquisition, holding, management or disposal of the investments; and
- the investments are managed as a whole by or on behalf of the operator of the private fund, directly or indirectly, for reward based on the assets, profits or gains of the company, unit trust or partnership.
A list of “non-fund arrangements” including (i) securitisation special purpose vehicles, (ii) joint ventures, (iii) proprietary vehicles, (iv) holding vehicles, (v) preferred equity financing vehicles, (vi) sovereign wealth funds, (vii) structured finance vehicles, and (viii) single family offices are listed in the Schedule to the Law and are excluded from the scope of the Law.
Single investor Private Funds will be outside the scope of the Law as there would be no pooling of investor funds in this case.
Which Funds will fall within the scope of the Private Funds Law?
The Law applies to private equity funds, real estate funds, and other types of closed-ended funds set up as Cayman Islands limited partnerships, companies (including SPCs), unit trusts and limited liability companies.
The Law will also apply to non-Cayman Islands private funds carrying on business or attempting to carry on business in or from the Cayman Islands. As stated above, there is a separate registration regime for mutual funds under the Mutual Funds Law (2020 Revision) as amended and the Law will not apply to a regulated mutual fund or a regulated EU Connected Fund.
Restricted Scope Private Fund
The Law creates a category of Private Funds called a “restricted scope private fund” and this defined as (i) an exempted limited partnership; (ii) that is managed or advised by a person who is licensed or registered by CIMA or authorised or registered by a recognised overseas regulatory authority; and (iii) in which all of the investors are non-retail in nature, being either high net worth persons or sophisticated persons. The Law does not state what the consequences will be for registering with CIMA as a “restricted scope private fund” (e.g. the prescribed details to be filed with CIMA might be less in nature and scope and/or the fees payable to CIMA might be different).
Registration Process – What documentation is required to register with CIMA?
Section 5 of the Law states that a Private Fund is required to:
- submit an application for registration to CIMA within twenty-one (21) days after its acceptance of capital commitments from investors for the purposes of investments;
- file prescribed details in respect to the Private Fund with CIMA;
- pay a prescribed annual registration fee to CIMA in respect of the Private Fund;
- comply with any conditions of its registration imposed by CIMA; and
- comply with the provisions of the Law.
In terms of documentation to be filed with CIMA, the Law refers to the filing of “prescribed details” in respect of the Private Fund but there is no requirement to file an offering memorandum or any other offering document. There are also no requirements in the Law on the contents of a Private Fund’s offering document, if any. Regulations stipulating the exact nature of the “prescribed details” to be filed have not yet been published.
Timing of Registration
Section 5 of the Law indicates that a new Private Fund falling within the scope of the Law will be required to:
- submit its registration application to CIMA within 21 days after its acceptance of capital commitments from investors for the purposes of investments; and
- be registered by CIMA before it accepts capital contributions from investors in respect of investments.
Accordingly, the timing of registration with CIMA will be somewhat different from that applicable to mutual funds.
New Funds: A Private Fund that begins to carry on business in or from Cayman at any time during the period of six (6) months beginning on 7th February 2020 may continue to carry on business in or from Cayman without registering with CIMA until 7th August 2020 or such further period as may be specified by CIMA.
Existing Funds: A Private Fund that immediately before 7th February 2020 was carrying on business in or from Cayman may continue to carry on business in or from Cayman without registering with CIMA until 7th August 2020 or such further period as may be specified by CIMA.
Neither the CIMA REEFS portal nor CIMA forms have as yet been configured or published to deal with the registration of new or existing Private Funds’ registration.
Requirement to register changes with CIMA
A Private Fund is required under the Law to notify CIMA:
(a) of any change that materially affects any information submitted to CIMA;
(b) of any change of its registered office or the location of its principal office.
The Private Fund will have twenty-one (21) days after making the change or becoming aware of the change to file details of the change with CIMA.
Fees
Regulations stipulating the fees payable to CIMA in respect of registration of Private Funds have not been published.
Regulatory Requirements for Private Funds
The Law requires that Private Funds that are subject to the Law have in place certain mechanisms and safeguards relating to audit, valuation of assets, safekeeping of fund assets, cash monitoring, and identification of securities.
Audit
Each Private Fund is required to (i) have its accounts audited annually by a firm of auditors on the CIMA approved list of auditors and (ii) file such audited accounts with CIMA within six (6) months of the end of each financial year of the Private Fund (along with an Financial Annual Return in CIMA’s prescribed form).
Audited accounts will be required to be prepared in accordance with the International Financial Reporting Standards or the generally accepted accounting principles of the United States of America, Japan or Switzerland or any non-high risk jurisdiction. The Law defines a “non-high risk jurisdiction” as any jurisdiction that is not on the list of high risk jurisdictions issued by the Financial Action Task Force.
CIMA may, in relation to the whole or part of any financial year of a Private Fund, grant an exemption to the Private Fund from the requirement to submit audited accounts to CIMA either absolutely or subject to such conditions as CIMA may deem appropriate. The circumstances in which such an audit exemption may be granted have not yet been published by CIMA but might be the same as, or similar to, the circumstances currently applicable to regulated mutual funds.
Valuation of assets
The Law requires a Private Fund to have appropriate and consistent procedures for the purposes of proper valuations of its assets, which ensures that valuations are conducted in accordance with the requirements in the Law. Valuations of the assets of a Private Fund are required to be carried out at a frequency that is appropriate to the assets held by the Private Fund and, in any case, on at least an annual basis.
Valuations of the Private Fund’s assets can be performed by:
(a) an independent third party that is appropriately professionally qualified to conduct valuations in a non-high risk jurisdiction;
(b) the manager or operator of the Private Fund, or a person who has a control relationship with the manager of the Private Fund, provided that:
i. the valuation function is independent from the portfolio management function; or
ii. potential conflicts of interest are properly identified and disclosed to the investors of the private fund; or
(c) an administrator not falling under paragraph (a) above who is appointed by the Private Fund.
Where the valuation of the Private Fund’s assets is not performed by an independent third party professionally qualified to conduct valuations in a non-high risk jurisdiction, CIMA may require the Private Fund to have its valuations verified by an auditor or independent third party.
The Law empowers CIMA to waive the valuation requirements, either absolutely or subject to such conditions as CIMA deems appropriate.
Safekeeping of fund assets
The Law requires a custodian (i) to hold the Private Fund’s assets which are capable of physical delivery or capable of registration in a custodial account except where that is neither practical nor proportionate given the nature of the Private Fund and the type of assets held; and (ii) to verify title to, and maintain records of, fund assets.
Where having a custodian is neither practical nor proportionate given the nature of the Private Fund and the type of assets held, title verification can be carried out by any of (i) the manager or operator of the Private Fund (subject to functional independence or conflicts management requirements), (ii) an independent administrator, or (iii) another independent third party.
Where the title verification is not performed by a custodian, an administrator or another independent third party appointed, CIMA may require the Private Fund to have its title verification verified by an appropriately professionally qualified independent third party.
Cash monitoring
The Law requires a Private Fund to appoint an administrator, custodian or another independent third party (or the manager or operator of the Private Fund) to:
• monitor the cash flows of the Private Fund;
• ensure that all cash has been booked in cash accounts opened in the name, or for the account, of the Private Fund; and
• ensure that all payments made by investors in respect of investment interests have been received.
When the cash monitoring function is not performed by an administrator, custodian or another independent third party, the cash management function established by the manager or operator of the Private Fund is required to be independent of the portfolio management function or the potential conflicts of interest must be properly identified and disclosed to investors.
Identification of securities
A Private Fund that regularly trades securities or holds them on a consistent basis must maintain a record of the identification codes (e.g. ISIN codes or CUSIP codes) of the securities that it trades and holds and make this available to CIMA upon request.
Penalty for Non-Compliance
The penalty for failing to comply with Section 5 of the Law (registration with CIMA) is liability on conviction to a fine of CI$100,000 (approximately US$122,000). The “operator” (e.g. the board of directors where the Private Fund is structured as a company or a general partner where the Private Fund is structured as a limited partnership) of a Private Fund will be responsible for securing the compliance by that Private Fund with the Law. The operator of a Private Fund that fails to discharge its responsibility for securing the Private Fund’s compliance with the Law commits an offence and is liable on conviction to a fine of CI$20,000 (approximately US$24,400).
This publication is not intended to be a substitute for specific legal advice or a legal opinion. For specific advice on the new registration requirements for Cayman closed-ended funds and compliance generally with the Private Funds Law, 2020, please contact your usual Loeb Smith attorney or any of:
E: gary.smith@loebsmith.com
E: ramona.tudorancea@loebsmith.com
E: vivian.huang@loebsmith.com
E: yun.sheng@loebsmith.com
E: elizabeth.kenny@loebsmith.com
E: santiago.carvajal@loebsmith.com
Cayman Islands’ mutual funds which are currently exempted from registration with the Cayman Islands Monetary Authority (“CIMA”) under Section 4(4) of the Mutual Funds Law (2020 Revision) on the basis that (i) the shares or interests are held by not more than fifteen investors, (ii) a majority of whom are capable of appointing or removing the operator of the fund (“Section 4(4) Funds“) will be required, once the Mutual Funds (Amendment) Bill, 2020 (the “Bill”) becomes law, to register with CIMA and fall within CIMA’s regulatory purview.
The Bill does not propose a prescribed minimum initial investment amount and Section 4(4) Funds will not be required to file an offering document (or any amendments) with CIMA. Certain regulatory powers of CIMA which already apply to existing CIMA regulated mutual funds will also apply to Section 4(4) Funds once the Bill becomes law.
In connection with their registration with CIMA, each Section 4(4) Fund will be required to do the following.
- Pay an annual fee to CIMA.
- File a certified copy of an extract of its constitutional documents with CIMA showing that a majority in number of its investors are capable of appointing or removing the operator of the Fund.
- File with CIMA such other information as may be required in the prescribed form.
New Audit Requirement
Each Section 4(4) Fund will also be required to have its accounts audited annually by a firm of auditors on the CIMA approved list of auditors and file such audited accounts with CIMA within six (6) months of the end of each financial year of that Fund (along with an Financial Annual Return in CIMA’s prescribed form).
Audited accounts will be required to be prepared in accordance with the International Financial Reporting Standards or the generally accepted accounting principles of the United States of America, Japan or Switzerland or any non-high risk jurisdiction. The Bill defines a “non-high risk jurisdiction” as any jurisdiction that is not on the list of high risk jurisdictions issued by the Financial Action Task Force.
Timing for Registration for Existing Section 4(4) Funds
The Bill proposes that existing Section 4(4) Funds will have six (6) months from the date on which the Bill becomes law to register with CIMA and to comply with the new requirements.
An existing Section 4(4) Fund that registers with CIMA in 2020 will not be required to file its audited accounts in respect of any prior financial year.
This publication is not intended to be a substitute for specific legal advice or a legal opinion. For specific advice on the registration requirements for Cayman exempted mutual funds, please contact your usual Loeb Smith attorney or any of:
E: gary.smith@loebsmith.com
E: ramona.tudorancea@loebsmith.com
E: vivian.huang@loebsmith.com
E: yun.sheng@loebsmith.com
E: elizabeth.kenny@loebsmith.com
E: santiago.carvajal@loebsmith.com
The Cayman Islands was removed from the FATF Grey list in October last year (see related publication here (Cayman Islands removed from FATF Grey list – Loeb Smith)), which was then followed by the UK on 5 December 2023 which removed the Cayman Islands from the UK list of high-risk countries for AML and CTF purposes pursuant to the Money Laundering and Terrorist Financing (High-Risk Countries) (Amendment) (No. 2) Regulations 2023.
The European Union followed suit a week later on 12 December 2023 when the EU Commission passed the Commission Delegated Regulation (EU) 2024/163 (the “Regulation”) amending Delegated Regulation (EU) 2016/1675 as regards the deletion of the Cayman Islands and Jordan from the table in point I of the Annex, i.e. the EU list of high-risk third countries. The Regulation was finally published on the Official Journal of the European Union on 18 January 2024 (the full copy can be viewed at the following link: Delegated regulation – EU – 2024/163 – EN – EUR-Lex (europa.eu)) and, accordingly, it will become effective 20 days after publication on 7 February 2024.
The Regulation becoming effective in February 2024 means that the Cayman Islands will be removed from the EU list of high-risk third countries and represents the latest of a number of steps towards recognizing the Cayman Islands’ steady progress in the implementation and enforcement of internationally assessed and accepted AML/CTF measures. It is also highly significant for the Cayman Islands’ international reputation, and of particular importance in the structured finance sector as the Cayman Islands will again be a permissible jurisdiction for the establishment of securitisation special purpose entities (or ‘SSPEs’) for the purposes of Article 4 of the EU Securitisation Regulation.
Further Assistance
This publication is not intended to be a substitute for specific legal advice or a legal opinion. If you require further advice relating to the matters discussed in this Legal Update, please contact us. We would be delighted to assist.
E: gary.smith@loebsmith.com
E: robert.farrell@loebsmith.com
E. elizabeth.kenny@loebsmith.com
E: cesare.bandini@loebsmith.com
E: vivian.huang@loebsmith.com
E: faye.huang@loebsmith.com
Annual Fees Deferred
As of 26 March, the Cayman Islands Government has deferred the obligation to pay annual fees for all companies (including limited liability companies (LLCs) and foundation companies) and exempted liability partnerships (ELPs) until 30 June 2020.
The annual return filing deadline for these entities has also been extended to 30 June 2020. Penalties for late payment or late filing of annual returns will apply as of 1 July 2020.
Deferral of Economic Substance Notifications
As a result of the annual return extension for companies, the deadline for Economic Substance Notification (ESN) filings is now 30 June 2020. Please be aware that a ESN submission is required to be made to the Companies Registry before companies can file an annual return successfully.
Extension of Filing Deadlines by CIMA
The Cayman Islands Monetary Authority (CIMA) has also extended a number of filing deadlines in accordance with the table attached hereto.
For specific advice on making filings and submissions to the Companies Registry and/or CIMA, please contact your usual Loeb Smith attorney or any of:
E: gary.smith@loebsmith.com
E: vivian.huang@loebsmith.com
E: yun.sheng@loebsmith.com
E: elizabeth.kenny@loebsmith.com
E: santiago.carvajal@loebsmith.com
E: benjamin.wrench@loebsmith.com
LEGAL UPDATE
Undertaking Voluntary Liquidations of Cayman Islands’ Entities prior to 31 December 2019.
Voluntary liquidations generally
As the conclusion of 2019 approaches, clients should give some thought to whether or not they have Cayman entities which they are no longer using and wish to liquidate prior to the end of 2019 in order to, among other things, avoid annual government registration fees due in January 2020. A voluntary liquidator of a Cayman company or exempted limited partnership (ELP) is required to hold the final general meeting for that company or file the final dissolution notice for that ELP on or before 31 January 2020.
Voluntary liquidations – Funds registered with CIMA
Investment Funds which are registered with the Cayman Islands Monetary Authority (CIMA) should commence voluntary liquidation and submit documents to CIMA in order to have those Funds’ status change from “active” to “license under liquidation” by Tuesday, 31 December 2019 if they are to avoid their annual fees payable to CIMA for 2020. It is also important for investment funds registered with CIMA to give some thought to CIMA’s requirement for a final “stub” audit for the period of 2019 in respect of which the Fund operated before going into liquidation. CIMA may be reluctant to grant a partial year audit waiver for a liquidating Fund.
As an alternative to voluntary liquidation, some investment fund managers might be considering a wind down of one or more CIMA registered funds prior to the end 2019 and wish to de-register from CIMA or at least go into the status of “licence under termination” with CIMA in order to avoid or reduce annual registration fees payable to CIMA for 2020. If not already started, we recommend that action be taken now to begin this process.
For specific advice on voluntary liquidations of Cayman Islands’ entities or winding down investment funds before 31 December 2019, please contact any of:
E: gary.smith@loebsmith.com
E: ramona.tudorancea@loebsmith.com
E: vivian.huang@loebsmith.com
E: yun.sheng@loebsmith.com
E: elizabeth.kenny@loebsmith.com
E: santiago.carvajal@loebsmith.com

LEGAL UPDATE
Guidance for Directors registered with the Cayman Islands Monetary Authority under The Directors Registration and Licensing Law
Renewal of Director Registration for 2019
Directors who are registered with the Cayman Islands Monetary Authority (“CIMA”) in accordance with The Directors Registration and Licensing Law, 2014 (“DRLL”) in connection with being a Director of an entity that is registered with CIMA (e.g. registered Mutual Fund or an investment management or investment advisory entity that has “Excluded Person” status under the Securities Investment Business Law (2015 Revision)) (a “Covered Entity”) should be aware of the requirement to renew registration via the CIMA portal https://gateway.cimaconnect.com/. A Director should renew his or her registration with CIMA if he or she will continue to be a Director of one or more Covered Entity that either (1) will carry on business for some or all of 2019, or (2) is in the process of economically winding down and legally liquidating such business but the process will not cease prior to 31 December 2018.
Resignation from a Covered Entity
CIMA has stated[i] that if a Director no longer wishes to be registered or licensed as a Director of a Covered Entity, the Director must liaise with the Covered Entity’s registered office and ensure that CIMA receives written resolutions or an updated register of directors, stamped by the Cayman Islands Companies Registry, to duly notify CIMA of the Director’s resignation from that Covered Entity.
Resignation of a Director from a Covered Entity will not automatically result in a surrender of the Director’s registration or licence under the DRLL.
Surrender of Director Registration
CIMA has also stated[ii] that if a Director no longer wishes to be registered or licensed as a Director in accordance with the DRLL, he or she is required to first resign as a Director of all Covered Entities, then log into the CIMA portal (see link above), complete the requisite information under “Surrender”, and pay the relevant surrender fee (US$731.71).
Once the Director has paid the surrender fee, CIMA will check its records to confirm that the Director is no longer listed as a Director on any Covered Entity. If he or she remains as a Director of a Covered Entity, CIMA will be unable to process the Director’s surrender application.
In addition to submitting the surrender fee, the Director is required to submit a formal letter which MUST contain the following information:
- that he or she has resigned as a Director of all Covered Entities;
- that he or she no longer plans to act as a Director on any Covered Entity; and
- that if he or she would like to act on any other Covered Entity or wishes to resume directorship services after he or she has surrendered his or her registration or licence, he or she will re-apply under the DRLL.
The Director is responsible for updating his or her records accordingly and must complete the requirements to surrender his or her registration or licence before the 31st December in order to avoid accruing annual fees for 2019, as well as penalties calculated at 1/12th of the annual fee for every month or part of a month after the 15th of January in each year that the fee is not paid
As stated above, Directors who will continue to provide directorship services and wish to remain current with their registration or licence status under the DRLL MUST, on or before the 15th of January in each calendar year, renew their registration or licence through the CIMA portal.
For specific advice on renewal or surrender under the DRLL or resignation from a Covered Entity, please contact any of:
E gary.smith@loebsmith.com
E ramona.tudorancea@loebsmith.com
E yun.sheng@loebsmith.com
E vivian.huang@loebsmith.com
E elizabeth.kenny@loebsmith.com
[i] CIMA’s Supervisory Issues & Information Circular– Second Edition issued in October 2016
[ii] CIMA’s Supervisory Issues & Information Circular– Second Edition issued in October 2016
The EU’s General Data Protection Regulation (“GDPR”) applies to offshore investment funds with European investors since 25 May 2018. The Cayman Islands Data Protection Law (“DPL”), which will regulate the future processing of all personal data, is intended to come into effect in January 20191. Inspired from the UK’s Data Protection Act, DPL includes provisions very similar to GDPR (together “Data Protection Laws”), with certain notable differences.
As part of the subscription process, investors are required to provide a government-issued photo ID, source of funds and wealth, contact details, payment details, and tax residence information, or even additional information about employment, dependents, income and investment objectives (the “Investor Personal Data”), which are processed and stored by or on behalf of the investment fund (the “Fund”) and/or by one or more of the service providers to the Fund. Some of the processing may be done by different parties in various jurisdictions.
Generally, the Administrator, Transfer Agent, Distributor, and the Investment Manager of a Fund may fall within the definition of a Data Controller or Data Processor. To ensure compliance with GDPR and/or DPL, the Fund’s Board of Directors should review the contractual arrangements with these parties and may need to appoint a Data Protection Officer. As a reminder, the Board of Directors of the Fund is required to supervise third party service providers and ensure that there are sufficient measures in place to protect Investor Personal Data. Privacy Notices in the Fund’s offering documents would need to be updated to ensure that investors are fully aware of where their Personal Data is being processed, by whom and for what purpose.
For ease of reference, a brief comparison between GDPR and DPL is included below2.
Comparison of the Main Provisions
GDPR | DPL | |
Personal Data | Any information relating to an individual who can be identified, directly or indirectly, from that data (including online identifiers such as IP address-es and cookies may qualify as personal data if they are capable of being linked back to the individual). | Same as GDPR. |
Data Controller | The person who, alone or with others, determines the purposes, conditions and means of the processing of Personal Data. | DPL applies to any Data Controller in respect of Personal Data (a) es-tablished and processed in the Cayman Islands; or (b) processed in the Cayman Islands otherwise than for the purposes of transit3. |
Privacy Notice | At the time of collection of the data, individuals must be informed of the purposes and detail behind the processing, the details of transfers of data and any security and technical safeguards in place. This information is generally provided in a separate privacy notice. | Same as GDPR. |
Right to Access | Individuals have the right to obtain confirmation that their Personal Data is processed and to access it. Data Controllers must respond within a month of the access request. A copy of the information must be provided free of charge. | Same as GDPR, but DPL permits a reasonable fee to be charged. |
Retention Period | Personal data should not be kept for longer than is necessary to fulfil the purpose for which it was originally collected. Controllers must inform data subjects of the period of time (or reasons why) data will be retained on collection. | Not a requirement under DPL. However, as with the GDPR, if there is no compelling reason for a Data Controller to retain Personal Data, a data subject can request its secure deletion.rsonal data should not be kept for longer than is necessary to fulfil the purpose for which it was originally collected. Controllers must inform data subjects of the period of time (or reasons why) data will be retained on collection. |
Right to Erase | Should the individual subsequently wish to have their data removed and the Personal Data is no longer required for the reasons for which it was collected, then it must be erased. Data Controllers must notify third party processors or sub-contractors of such requests. | Same as GDPR. |
Transfers | International transfers permitted to third party processors or between members of the same group. | Same as GDPR. |
Data Security | Minimum security measures are pre-scribed as pseudonymisation and encryption, ability to restore the availability and access to data, regularly testing, assessing and evaluating security measures. | Appropriate technical and organisational measures must be taken to prevent unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data4. |
Data Processors | Security requirements are extended to data processors as well as Data Controllers. | There is no liability for processors under DPL. However, they may be held liable based on contract or tort law. |
Data Breach | Data Controllers must notify the regulatory authority of Personal Data breaches without undue delay and, where feasible, not later than 72 hours after having become aware of a breach. | In the event of a Personal Data breach, the Data Controller must, “without undue delay” but no longer than five (5) days after the Data Controller should have been aware of that breach, notify the Om-budsman and any affected individuals5. |
Breach Notice | The notification should describe the nature of the breach, its conse-quences, the measures proposed or taken by the Data Controller to ad-dress the breach, and the measures recommended by the Data Controller to the individual concerned to miti-gate the possible adverse effects of the breach. | Same as GDPR. |
Right to be Forgotten | An individual may request the deletion or removal of Personal Data where there is no compelling reason for its continued processing. | DPL contains a similar right, although this is expressed as a general right of “erasure”. Under the UK’s Data Protection Act, the right is limited to processing that causes unwarranted and substantial damage or distress. Under DPL this threshold is not present. As with the GDPR, if there is no compelling reason for a data controller to retain Personal Data, a data subject can request its secure deletion. |
Right to Object | An individual has the right at any time to require a Data Controller to stop processing their Personal Data for the purposes of direct marketing. There are no exemptions or grounds to refuse. A Data Controller must deal with an objection to processing for direct marketing at any time and free of charge. | Same as GDPR. |
Direct Marketing and Consent | The Data Controller must inform individuals of their right to object “at the point of first communication” and in a privacy notice. For any consent to be valid it needs to be obvious what the data is going to be used for at the point of data collection and the Data Controller needs to be able to show clearly how consent was gained and when it was obtained. | Including an unsubscribe facility in each marketing communication is recommended best practice. If an individual continues to accept the services of the Data Controller without objection, consent can be implied. |
Data Processors | The GDPR sets out more detailed statutory requirements to apply to the controller/processor relationship, and to processors in general. Data Pro-cessors are now directly subject to regulation and are prohibited from processing Personal Data except on instructions from the Data Controller. | Best practice would always be to put in place a contract between a controller and processor. Essentially, the contract should require the Data Processor to level-up its policies and procedures for handling personal data to ensure compliance with DPL. Use of sub-contractors by the service provider should be prohibited without the prior approval of the Data Controller6. |
Data Protection Officer | Mandatory if the core activities of the Data Controller consist of processing operations which require large scale regular and systematic monitoring of individuals or large scale processing of sensitive Personal Data. | Does not require the appointment, although this is recommended best practice. |
Penalties | Two tiers of sanctions, with maximum fines of up to €20 million or 4% of annual worldwide turnover, whichever is greater. | Refusal to comply or failure to comply with an order issued by the Ombudsman is an offence. Penal-ties are also included for unlawful obtaining or disclosing Personal Data7. Directors may be held liable under certain conditions8.
The Data Controller is liable on conviction to a fine up to CI$100,000 or imprisonment for a term of 5 years or both. Monetary penalty orders of an amount up to CI$250,000 may also be issued against a Data Controller. |
This publication is not intended to be a substitute for specific legal advice or a legal opinion. For specific advice, please contact your usual Loeb Smith attorney or any of:
E: gary.smith@loebsmith.com
E: ramona.tudorancea@loebsmith.com
E: vivian.huang@loebsmith.com
E: yun.sheng@loebsmith.com
E: elizabeth.kenny@loebsmith.com
- The Data Protection Law, 2017 (Law) was passed on 27 March 2017 and it is not yet in force.
- The comparison only includes provisions which may be relevant to offshore investment funds and is therefore not a comprehensive analysis.
- See Art. 6 of DPL
- See Schedule 1 of DPL
- See Art. 16 of DPL
- Under DPL, the Data Controller is liable for breaches and non-compliance, whereas processors may not be. It is therefore very important for a Fund’s Board of Directors to ensure that adequate contractual protections are in place.
- See Arts. 53-54 of DPL
- See Art. 58 of DPL
Voluntary liquidations generally
As the conclusion of 2018 approaches, clients should give some thought to whether or not they have Cayman entities which they wish to liquidate prior to the end of 2018 for, among other things, the purpose of avoiding annual government registration fees due in January 2019. A voluntary liquidator of a Cayman company or exempted limited partnership (ELP) is required to hold the final general meeting for that company or file the final dissolution notice for that ELP on or before 31 January 2019.
Voluntary liquidations – Funds registered with CIMA
Investment Funds which are registered with the Cayman Islands Monetary Authority (CIMA) should commence voluntary liquidation and submit documents to CIMA in order to have those Funds’ status change from “active” to “license under liquidation” by Monday, 31 December 2018 if they are to avoid their annual fees payable to CIMA for 2019. It is also important for investment funds registered with CIMA to give some thought to CIMA’s requirement for a final “stub” audit for the period of 2018 in respect of which the Fund operated before going into liquidation. CIMA may be reluctant to grant a partial year audit waiver for a liquidating Fund.
As an alternative to voluntary liquidation, some investment fund managers might be considering a wind down of one or more CIMA registered funds prior to the end 2018 and wish to de-register from CIMA or at least go into the status of “licence under termination” with CIMA in order to avoid or reduce annual registration fees payable to CIMA for 2019. If not already started, we recommend that action be taken now to begin this process.
For specific advice on voluntary liquidation of Cayman Islands’ entities or winding down in-vestment funds before 31 December 2018, please contact any of:
E gary.smith@loebsmith.com
E ramona.tudorancea@loebsmith.com
E yun.sheng@loebsmith.com
E vivian.huang@loebsmith.com
E elizabeth.kenny@loebsmith.com
The Cayman Islands Monetary Authority (“CIMA”) has extended the deadline for each CIMA registered Cayman domiciled investment fund which launched prior to 1 June 2018 to notify CIMA of the appointment of natural persons to act as its Anti-Money Laundering Compliance Officer (“AMLCO”), Money Laundering Reporting Officer (“MLRO”) and Deputy Money Laundering Reporting Officer (“DMLRO”) from 30 September 2018 to 31 December 2018. CIMA has clarified that CIMA regulated funds must still appoint these AML Officers by 30 September 2018 but now have until 31 December 2018 to notify CIMA of such appointments. Notification of the appointment of AML Officers to CIMA registered funds must take place via the CIMA REEFS portal.
CIMA has also clarified that each unregulated Cayman investment fund (and is therefore not registered with CIMA) which launched prior to 1 June 2018 now has until 31 December 2018 to designate entity specific AML Officers. Each Cayman investment fund launched from 1 June 2018 (“Post May 2018 Funds”) are expected to have AML Officers designated from the time of launch. Post May 2018 Funds which are required to register with CIMA will be required to register details of their AML Officers at the time of the fund’s registration with CIMA.
For specific advice on the appointment of AML Officers to your Cayman Islands’ investment funds, please contact any of:
E: gary.smith@loebsmith.com
E: vivian.huang@loebsmith.com
E ramona.tudorancea@loebsmith.com
E elizabeth.kenny@loebsmith.com