Government E-services website (2019-11-15)

Summary

This is a published case summary from the Cayman Islands Ombudsman describing a data breach investigation handled through informal resolution under the Data Protection Law. It illustrates how a specific incident was resolved rather than announcing any new rule or ongoing requirement.

• What happened: A government ministry self-reported that a staff member could see another staff member's personal data on the ministry's e-services website.
• Response: The website was taken offline, an investigation was launched, and the cause was traced to an error in implementing global attributes on the web page.
• Remediation: Further testing was carried out to prevent recurrence.
• Outcome: The Ombudsman verified the remedial steps, found no prejudice to affected individuals' rights, and closed the case without issuing a formal enforcement notice.

As a closed case summary, this document does not itself create new compliance obligations; it is informational, illustrating the Ombudsman's informal resolution process for data breach notifications by government bodies.

Applies to

government ministries, public authorities handling personal data