Newspaper links to personal data of football players (2021-06-23)

Summary

This is a published case summary from the Cayman Islands Ombudsman describing an informal resolution of a data protection complaint. It illustrates how a specific personal data breach was handled and closed, rather than setting out new rules or ongoing requirements.

• Incident: A link in an online news story inadvertently pointed to a document containing personal data of national football players and related individuals, including passport numbers and dates of birth.
• Response: The CI Football Association alerted the newspaper, which immediately removed the link; web statistics showed only three people had viewed the document.
• Remedial steps: The newspaper conducted staff awareness training and its editorial department will now review documents for personal data before publication.
• Outcome: The Ombudsman found the breach would not cause serious prejudice to data subjects and that appropriate mitigation had occurred, closing the case with no further action.

As a case outcome notice, this document does not itself impose new statutory obligations but signals the Ombudsman's expectations around prompt breach remediation and pre-publication data checks by organisations handling personal data.

Applies to

data controllers, media organisations