The Cayman Islands' equivalent of the European Union's General Data Protection Regulation promises individuals control over their personal data and protection against its misuse in both public and private sectors.

The Cayman Islands' Office of the Ombudsman is to be the supervisory authority for data-protection-related matters. It will acquire its powers and begin to investigate complaints on the due date.

It will be illegal for a data controller to transfer personal data to a country unless that country protects the rights and freedoms of data subjects adequately in relation to the processing of personal data. Countries that qualify for this accolade are those dictated by the EU, namely every country in the European Economic Area (which includes the whole EU) and a decidedly Caucasian contingent of countries chosen by the EU, to wit Andorra, Argentina, Canada, the Faroe Islands, Guernsey, Israel, the Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and (despite the European Court of Justice's denunciation in 2015 of the US Government's notorious law-breaking surveillance of its own citizens and those of other countries that came to light in the Snowden revelations) the United States of America.