OMBUDSMAN
Notice
103 published document(s) from Cayman Islands Office of the Ombudsman.
| Citation | Status | Summary |
|---|---|---|
| A Bank Uses Social Media to Find Out How to Contact an Individual (2020-11-02) | Issued 2020-11-02 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It is informational o… |
| A healthcare provider suffers phishing attack from former employee emails (2023-05-29) | Issued 2023-05-29 | This is a case summary published by the Cayman Islands Ombudsman describing a data breach incident at a healthcare provider, arising from a phishing attac… |
| Abuse of Utility Customer Profile (2020-09-02) | Issued 2020-09-02 | This is a published case summary from the Cayman Islands Ombudsman's data protection informal resolution decisions, describing a complaint about misuse of… |
| Access to One's Own Personal Data (2020-10-30) | Issued 2020-10-30 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint concerning a subject a… |
| Accidental disposal of documents outside courts building (2021-04-09) | Issued 2021-04-09 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint. It records the facts, the… |
| Artist's Profile on Art Website (2019-12-05) | Issued 2019-12-05 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution outcome under the Data Protection Law (DPL), not a bi… |
| Bank card statement (2019-10-18) | Issued 2019-10-18 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach complaint under the data protection… |
| Bank inadvertently sends existing clients’ data to new applicants (2022-02-21) | Issued 2022-02-21 | This is a case summary published by the Cayman Islands Ombudsman describing an informal resolution of a data breach complaint against a bank under data pr… |
| Breach at local telecommunications company (2023-01-12) | Issued 2023-01-12 | This is a published case summary from the Cayman Islands Ombudsman describing the outcome of a data breach investigation involving a local telecommunicati… |
| Civil servant claims unlawful access to travel history (2023-07-21) | Issued 2023-07-21 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against the Ministry o… |
| Coding error causes data breach (2020-10-27) | Issued 2020-10-27 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. A coding error in an… |
| Confirmation of job applications by Cabinet Office (2021-06-23) | Issued 2021-06-23 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach complaint against the Cabinet Office… |
| Contested debt in bank records (2021-01-12) | Issued 2021-01-12 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a bank. It ill… |
| Courts and expunging criminal records outside our jurisdiction (2022-07-25) | Issued 2022-07-25 | This is a published case summary from the Cayman Islands Ombudsman describing the outcome of a data protection complaint. It illustrates the limits of the… |
| Credit Union sends invitation without using BCC (2022-06-28) | Issued 2022-06-28 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint against a credit union. It… |
| Direct marketing by hotel (2021-05-12) | Issued 2021-05-12 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint involving direct marketing… |
| Employee image in directory does not violate the DPA (2023-05-22) | Issued 2023-05-22 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It does not create ne… |
| Employee of an insurance company reveals sensitive personal data (2022-07-20) | Issued 2022-07-20 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against an insurance c… |
| Enforcement Order - Department of Agriculture (2021-07-12) | Issued 2021-07-12 | This is an Ombudsman enforcement order arising from a complaint that the Department of Agriculture (DoA) was collecting excessive personal data from retai… |
| Enforcement Order - Department of Children and Family Services (2022-02-14) | Issued 2022-02-14 | This is an enforcement order issued by the Cayman Islands Ombudsman against the Department of Children and Family Services (DCFS) after it failed to prope… |
| Enforcement Order - Ministry of Planning, Agriculture, Housing, Infrastructure, Transport and Development (2024-11-01) | Issued 2024-11-01 | This is an enforcement order issued by the Cayman Islands Ombudsman under the Data Protection Act (2021 Revision) against the Ministry of Planning, Agricu… |
| Enforcement Order 201900212 (2021-03-18) | Issued 2021-03-18 | This is an enforcement order issued by the Cayman Islands Ombudsman against Jacques Scott Group Ltd. (JSG) following a ransomware attack that exposed pers… |
| Enforcement Order 202000507 (2020-08-07) | Issued 2020-08-07 | This is an enforcement order issued by the Cayman Islands Ombudsman against the Registrar of Companies following a data protection complaint. The complain… |
| Enforcement Order 202000583 - Gain Global Markets Inc. (2022-08-02) | Issued 2022-08-02 | This is an Enforcement Order issued by the Cayman Islands Ombudsman against Gain Global Markets Inc., a financial services company acting as a data contro… |
| Enforcement Order 202000820 (2021-03-18) | Issued 2021-03-18 | This is an executive summary of an enforcement order issued by the Cayman Islands Office of the Ombudsman against St. Ignatius Catholic School (owned and… |
| Enforcement Order 202100204 (2021-09-22) | Issued 2021-09-22 | This is an Enforcement Order issued by the Cayman Islands Ombudsman under the Data Protection Act (2021 Revision) following a subject access request compl… |
| Enforcement Order 202100222 - Betty Boo Real Estate Sales (2023-04-27) | Issued 2023-04-27 | This is an Enforcement Order issued by the Cayman Islands Ombudsman against Betty Boo Real Estate Sales, a sole-operator real estate brokerage, following… |
| Enforcement Order 202100552-553 (2023-03-21) | Issued 2023-03-21 | This is an Enforcement Order issued by the Cayman Islands Ombudsman against CIBC First Caribbean International Bank (Cayman) following complaints from two… |
| Enforcement Order 202300267 (2023-07-25) | Issued 2023-07-25 | This is an individual enforcement order issued by the Cayman Islands Ombudsman under the Data Protection Act (2021 Revision) against the Department of Edu… |
| Enforcement Order 202300268 (2023-11-09) | Issued 2023-11-09 | This is an Enforcement Order issued by the Cayman Islands Ombudsman against the Public Lands Commission (PLC) following a complaint that the PLC was colle… |
| Enforcement Order 202400056 (2024-10-25) | Issued 2024-10-25 | This is an enforcement order issued by the Cayman Islands Ombudsman under the Data Protection Act (2021 Revision) against The Proprietors, Strata Plan No.… |
| Enforcement Order 202400056-2 (2024-12-12) | Issued 2024-12-12 | This is an enforcement order issued by the Cayman Islands Ombudsman against The Proprietors, Strata Plan No. 273 (the body corporate managing the Pinnacle… |
| Enforcement Order 202400591, 202400592 & 202400716 - WORC (2024-12-04) | Issued 2024-12-05 | This is an enforcement order issued by the Cayman Islands Ombudsman against Workforce Opportunities & Residency Cayman (WORC) following three personal dat… |
| Enhanced due diligence by a financial services provider (2021-06-23) | Issued 2021-06-23 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution decision, not a rule or regulatory instrument. It con… |
| Erroneous group email sent by financial service provider (2019-11-26) | Issued 2019-11-26 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It is illustrative of… |
| Error in HR system causes breach at PoCS (2022-08-04) | Issued 2022-08-04 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection breach at the Portfolio of the C… |
| Excessive data collected by jobs portal (2021-06-08) | Issued 2021-06-08 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint against WORC's online Jobs… |
| Excessive data gathering for beach weddings - Public Lands Commission (2023-11-09) | Issued 2023-11-09 | This is an Ombudsman case summary describing the outcome of a Data Protection Act complaint against the Public Lands Commission (PLC) concerning personal… |
| Financial regulator inadvertently discloses personal data (2022-03-10) | Issued 2022-03-10 | This is a published case summary from the Cayman Islands Ombudsman describing an investigation into a data breach at an unnamed financial regulator. An em… |
| Financial service provider neglects to update their paper files (2022-01-31) | Issued 2022-01-31 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint against a financial service… |
| Fund administrator system sends a report containing financial details to an unintended recipient (2023-09-04) | Issued 2023-09-04 | This is a published case summary from the Cayman Islands Ombudsman describing a data protection breach investigation and its outcome, not a rule or regula… |
| Government Department E-Services Website Breach (2020-03-25) | Issued 2020-03-25 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint, not a rule or enforcement… |
| Government E-services website (2019-11-15) | Issued 2019-11-15 | This is a published case summary from the Cayman Islands Ombudsman describing a data breach investigation handled through informal resolution under the Da… |
| HR system reports are sent to incorrect Ministry (2023-05-23) | Issued 2023-05-23 | This is a published case summary from the Cayman Islands Ombudsman describing a data protection breach in which an automated Cayman Islands Government HR… |
| HSA discloses PCR results to wrong person (2022-03-28) | Issued 2022-03-28 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against the Health Ser… |
| Health Clinic Gathers Credit Card Data in Contravention of Data Security Standards (2020-11-02) | Issued 2020-11-02 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a health clini… |
| Health Insurance Form Asking About Applicants' Sex Lives (2020-10-12) | Issued 2020-10-12 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. A complainant objecte… |
| Immigration service provider locates missing documents (2023-10-18) | Issued 2023-10-18 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution under data protection complaint handling. It illustra… |
| Inadvertent leak of personal data by financial services company (2019-11-25) | Issued 2019-11-25 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint, not a binding rule or… |
| Incorrect Access Controls in Utility Company’s Recruitment Software (2020-01-21) | Issued 2020-01-21 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach notification made by a utility compa… |
| Individual’s details discussed in Parliament (2021-11-11) | Issued 2021-11-11 | This is a published case summary from the Cayman Islands Ombudsman's office describing an informal resolution of a data protection complaint. It is inform… |
| Information sharing between HM Prison, RCIPS and the Courts (2022-03-24) | Issued 2022-03-24 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It is not a rule or r… |
| Investor personal data leaked on the dark web (2023-09-25) | Issued 2023-09-25 | This is a published case summary from the Cayman Islands Ombudsman describing the outcome of an investigation into a personal data breach at a Cayman Isla… |
| Job references not held (2022-10-25) | Issued 2022-10-25 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint, not a rule or policy docum… |
| Legal analysis not personal data accessible under section 8 - Cabinet Office (2022-06-28) | Issued 2022-06-28 | This is an Ombudsman case decision (Case 202200069) resolving a complaint that the Cabinet Office and PACT Caucus failed to disclose all personal data in… |
| Limitations to the right to access one’s own data (2022-03-29) | Issued 2022-03-29 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It illustrates how ex… |
| Local hospital sends patient COVID-19 results to unintended recipient (2023-09-13) | Issued 2023-09-13 | This is a published case summary from the Cayman Islands Ombudsman describing a resolved data protection complaint. It recounts how a local hospital's COV… |
| Local law firm made aware of personal data breach (2023-03-16) | Issued 2023-03-16 | This is a published case summary from the Cayman Islands Ombudsman describing how a personal data breach at a local law firm was handled under the Data Pr… |
| Malware attack on electronic payment system (2021-08-31) | Issued 2021-08-31 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution following a data breach notification, not a binding r… |
| Medical clinic inadvertently sends health records to the Health Practice Board (2023-06-08) | Issued 2023-06-08 | This is a case summary published by the Cayman Islands Ombudsman describing a resolved data protection complaint. A medical office accidentally emailed he… |
| Member of the public requests removal from Election Register (2023-04-20) | Issued 2023-04-20 | This is a published case summary from the Cayman Islands Ombudsman's Data Protection informal resolution decisions, not a rule or guidance document. It de… |
| Misdirected Email with Account Information (2020-02-14) | Issued 2020-02-14 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a personal data breach complaint against a bank. I… |
| Missing exhibit book and entries (2023-10-19) | Issued 2023-10-19 | This is a published case summary from the Cayman Islands Ombudsman describing the outcome of a Freedom of Information (FOI) appeal against the Royal Cayma… |
| Newspaper links to personal data of football players (2021-06-23) | Issued 2021-06-23 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It illustrates how a… |
| No personal data held by local law firm (2023-08-18) | Issued 2023-08-18 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a local law fi… |
| No personal data on reissued SIM cards (2022-05-02) | Issued 2022-05-02 | This is a case summary published by the Cayman Islands Ombudsman describing the outcome of an informal resolution into a data protection complaint. A comp… |
| Overseas fund administrator suffers ransomware attack (2021-09-16) | Issued 2021-09-16 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach complaint. An overseas fund administ… |
| Performance Assessment Sent to Wrong Person (2020-02-18) | Issued 2020-02-18 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data breach complaint under data protection oversight… |
| Personal Data of Former Employees on Company Website (2019-12-17) | Issued 2019-12-17 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution under data protection complaint handling. It is not a… |
| Personal data transferred from company laptop (2020-10-12) | Issued 2020-10-12 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a personal data breach complaint under data protec… |
| Pharmacy gives prescription medicine to the wrong patient (2021-04-14) | Issued 2021-04-14 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint. It illustrates how the Omb… |
| Pharmacy suffers ransomware attack (2021-12-02) | Issued 2021-12-02 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach investigation involving a pharmacy.… |
| Phishing Attack at Financial Services Company (2020-02-11) | Issued 2020-02-11 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach complaint under the Data Protection… |
| Phishing attack at professional association (2021-06-07) | Issued 2021-06-07 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint involving a phishing attack… |
| Processor employees fall victim to a smishing attack allowing access to customer information (2023-08-15) | Issued 2023-08-15 | This is a published case summary from the Cayman Islands Ombudsman describing a personal data breach investigation under the Data Protection Act (DPA). A… |
| Proof of vaccination had no legal basis and was excessive - CIBC FCIB (Cayman) (2023-03-21) | Issued 2023-03-21 | This is a published case summary from the Cayman Islands Ombudsman describing the outcome of a data protection complaint against CIBC FCIB (Cayman). It il… |
| Public sector entity incurs unreasonable delays in responding to a subject access request (2022-07-20) | Issued 2022-07-20 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution outcome under the Data Protection Law. It illustrates… |
| RCIPS inadvertently release third party personal data in collision report (2022-10-04) | Issued 2022-10-04 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data breach complaint against the Royal Cayman I… |
| RCIPS loses bail book and finds it again (2022-08-12) | Issued 2022-08-12 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against the Royal Caym… |
| RCIPS sends misdirected data on firearms owner (2022-03-18) | Issued 2022-03-18 | This is a case summary published by the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against the Royal Cayman… |
| Ransomware attack at overseas financial services provider (2020-09-14) | Issued 2020-09-14 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution outcome, not a rule or directive. It concerns a ranso… |
| Request for Rectification of Financial Data (2020-10-20) | Issued 2020-10-20 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution decision under data protection complaints. It records… |
| Restructuring Administrator security incident results in a non-jurisdictional breach (2023-12-08) | Issued 2023-12-08 | This is a published case summary from the Cayman Islands Ombudsman describing a personal data breach notification that the Ombudsman reviewed and ultimate… |
| Retail Store Asking Customers for their Phone Numbers (2020-12-04) | Issued 2020-12-04 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a retail store… |
| Retail bank reveals overdrawn account (2021-11-29) | Issued 2021-11-29 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a retail bank.… |
| Retail bank’s lack of response to a subject access request (2021-06-03) | Issued 2021-06-03 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a retail bank.… |
| Reuse of pre-paid mobile number (2021-06-15) | Issued 2021-06-15 | This is a case summary published by the Cayman Islands Ombudsman describing an informal resolution decision on a data protection complaint. It is not a ru… |
| Right to one’s own personal data despite FOI exemptions (2023-02-10) | Issued 2023-02-10 | This is a published case summary from the Cayman Islands Ombudsman describing a Freedom of Information (FOI) decision. It illustrates how the Ombudsman ap… |
| Risk management entity sends misdirected shareholder data (2023-02-02) | Issued 2023-02-02 | This is a published case summary from the Cayman Islands Ombudsman describing a resolved personal data breach complaint under the Data Protection Act. It… |
| Search for beach access records was reasonable (2023-04-28) | Issued 2023-04-28 | This is a published case summary from the Cayman Islands Ombudsman describing the outcome of a Freedom of Information (FOI) review. An applicant sought re… |
| Serious data breach at real estate company - Betty Boo Real Estate Sales (2023-04-27) | Issued 2023-04-27 | This is a published case summary from the Cayman Islands Ombudsman describing an investigation and decision against a real estate company data controller… |
| Spreadsheet data tool causes utility emails to be sent to wrong customers (2021-07-15) | Issued 2021-07-15 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint. It illustrates how a data… |
| The right to access one’s own personal data - Department of Education Services (2023-07-25) | Issued 2023-07-25 | This is a published case summary from the Cayman Islands Ombudsman describing a data protection complaint decision against the Department of Education Ser… |
| Tourism sponsorship business cases and agreements to be disclosed (2023-09-14) | Issued 2023-09-14 | This is a case summary of a Freedom of Information decision by the Cayman Islands Ombudsman involving the Department of Tourism (DOT). An applicant sought… |
| Transparency and accountability for salary increase process (2023-11-30) | Issued 2023-11-30 | This is a case summary published by the Cayman Islands Ombudsman describing the outcome of a Freedom of Information (FOI) complaint against the Ministry o… |
| Unauthorized use of third-party website leads to data breach (2022-01-21) | Issued 2022-01-21 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data breach investigation. It illustrates how the Omb… |
| Unprotected Food Delivery Website (2020-07-08) | Issued 2020-07-08 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint about an online food delive… |
| Unsubscribing from an IT service provider (2021-08-05) | Issued 2021-08-05 | This is a published case summary from the Cayman Islands Ombudsman describing an informally resolved data protection complaint. An individual who was not… |
| Use of a Sign-in Book and CCTV Cameras (2020-11-20) | Issued 2020-11-20 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a Public Libra… |
| Verification of employment letter by retail bank (2021-03-05) | Issued 2021-03-05 | This is a case summary published by the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against a retail bank. I… |
| Videos of court proceeding are part of the judicial functions of a court (2023-06-22) | Issued 2023-06-22 | This is a published case summary of a Freedom of Information (FOI) decision by the Cayman Islands Ombudsman, not a rule or regulatory instrument. It recor… |
| WORC sends bulk emails without using BCC (2022-06-22) | Issued 2022-06-22 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint against WORC (Workforc… |
| “White hat hacker” informs bank of security breach (2020-03-26) | Issued 2020-03-26 | This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint involving a bank. A wh… |