The Cayman Islands Ombudsman introduced a new online form in December last year that can be used to report personal data breaches.

All personal data breaches must be reported under the s. 16(1) of Data Protection Act (As Revised) by the relevant data controllers. They must be reported to both the Ombudsman and any affected ‘data subjects’ no later than five calendar days after the data controller should, with the exercise of due diligence, have been aware of any breach.

The new web form may be accessed here.