About Loeb Smith
People
Sectors
Expertise
- Legal Service
- Banking and Finance
- Blockchain, Fintech and Cryptocurrency
- Capital Markets and Privatization
- Corporate
- Cybersecurity and Data Privacy
- Insolvency, Restructuring and Corporate Recovery
- Insurance and Reinsurance
- Intellectual Property
- Investment Funds
- Litigation and Dispute Resolution
- Mergers and Acquisitions
- Private Client and Family Office
- Private Equity and Venture Capital
- Governance, Regulatory and Compliance
- Entity Formation and Managed Services
- Consulting
- Legal Service
News and Announcements
Locations
Subscribe Newsletters
Contact

LEGAL UPDATE
Guidance for Directors registered with the Cayman Islands Monetary Authority under The Directors Registration and Licensing Law
Renewal of Director Registration for 2019
Directors who are registered with the Cayman Islands Monetary Authority (“CIMA”) in accordance with The Directors Registration and Licensing Law, 2014 (“DRLL”) in connection with being a Director of an entity that is registered with CIMA (e.g. registered Mutual Fund or an investment management or investment advisory entity that has “Excluded Person” status under the Securities Investment Business Law (2015 Revision)) (a “Covered Entity”) should be aware of the requirement to renew registration via the CIMA portal https://gateway.cimaconnect.com/. A Director should renew his or her registration with CIMA if he or she will continue to be a Director of one or more Covered Entity that either (1) will carry on business for some or all of 2019, or (2) is in the process of economically winding down and legally liquidating such business but the process will not cease prior to 31 December 2018.
Resignation from a Covered Entity
CIMA has stated[i] that if a Director no longer wishes to be registered or licensed as a Director of a Covered Entity, the Director must liaise with the Covered Entity’s registered office and ensure that CIMA receives written resolutions or an updated register of directors, stamped by the Cayman Islands Companies Registry, to duly notify CIMA of the Director’s resignation from that Covered Entity.
Resignation of a Director from a Covered Entity will not automatically result in a surrender of the Director’s registration or licence under the DRLL.
Surrender of Director Registration
CIMA has also stated[ii] that if a Director no longer wishes to be registered or licensed as a Director in accordance with the DRLL, he or she is required to first resign as a Director of all Covered Entities, then log into the CIMA portal (see link above), complete the requisite information under “Surrender”, and pay the relevant surrender fee (US$731.71).
Once the Director has paid the surrender fee, CIMA will check its records to confirm that the Director is no longer listed as a Director on any Covered Entity. If he or she remains as a Director of a Covered Entity, CIMA will be unable to process the Director’s surrender application.
In addition to submitting the surrender fee, the Director is required to submit a formal letter which MUST contain the following information:
- that he or she has resigned as a Director of all Covered Entities;
- that he or she no longer plans to act as a Director on any Covered Entity; and
- that if he or she would like to act on any other Covered Entity or wishes to resume directorship services after he or she has surrendered his or her registration or licence, he or she will re-apply under the DRLL.
The Director is responsible for updating his or her records accordingly and must complete the requirements to surrender his or her registration or licence before the 31st December in order to avoid accruing annual fees for 2019, as well as penalties calculated at 1/12th of the annual fee for every month or part of a month after the 15th of January in each year that the fee is not paid
As stated above, Directors who will continue to provide directorship services and wish to remain current with their registration or licence status under the DRLL MUST, on or before the 15th of January in each calendar year, renew their registration or licence through the CIMA portal.
For specific advice on renewal or surrender under the DRLL or resignation from a Covered Entity, please contact any of:
E gary.smith@loebsmith.com
E ramona.tudorancea@loebsmith.com
E yun.sheng@loebsmith.com
E vivian.huang@loebsmith.com
E elizabeth.kenny@loebsmith.com
[i] CIMA’s Supervisory Issues & Information Circular– Second Edition issued in October 2016
[ii] CIMA’s Supervisory Issues & Information Circular– Second Edition issued in October 2016
The EU’s General Data Protection Regulation (“GDPR”) applies to offshore investment funds with European investors since 25 May 2018. The Cayman Islands Data Protection Law (“DPL”), which will regulate the future processing of all personal data, is intended to come into effect in January 20191. Inspired from the UK’s Data Protection Act, DPL includes provisions very similar to GDPR (together “Data Protection Laws”), with certain notable differences.
As part of the subscription process, investors are required to provide a government-issued photo ID, source of funds and wealth, contact details, payment details, and tax residence information, or even additional information about employment, dependents, income and investment objectives (the “Investor Personal Data”), which are processed and stored by or on behalf of the investment fund (the “Fund”) and/or by one or more of the service providers to the Fund. Some of the processing may be done by different parties in various jurisdictions.
Generally, the Administrator, Transfer Agent, Distributor, and the Investment Manager of a Fund may fall within the definition of a Data Controller or Data Processor. To ensure compliance with GDPR and/or DPL, the Fund’s Board of Directors should review the contractual arrangements with these parties and may need to appoint a Data Protection Officer. As a reminder, the Board of Directors of the Fund is required to supervise third party service providers and ensure that there are sufficient measures in place to protect Investor Personal Data. Privacy Notices in the Fund’s offering documents would need to be updated to ensure that investors are fully aware of where their Personal Data is being processed, by whom and for what purpose.
For ease of reference, a brief comparison between GDPR and DPL is included below2.
Comparison of the Main Provisions
GDPR | DPL | |
Personal Data | Any information relating to an individual who can be identified, directly or indirectly, from that data (including online identifiers such as IP address-es and cookies may qualify as personal data if they are capable of being linked back to the individual). | Same as GDPR. |
Data Controller | The person who, alone or with others, determines the purposes, conditions and means of the processing of Personal Data. | DPL applies to any Data Controller in respect of Personal Data (a) es-tablished and processed in the Cayman Islands; or (b) processed in the Cayman Islands otherwise than for the purposes of transit3. |
Privacy Notice | At the time of collection of the data, individuals must be informed of the purposes and detail behind the processing, the details of transfers of data and any security and technical safeguards in place. This information is generally provided in a separate privacy notice. | Same as GDPR. |
Right to Access | Individuals have the right to obtain confirmation that their Personal Data is processed and to access it. Data Controllers must respond within a month of the access request. A copy of the information must be provided free of charge. | Same as GDPR, but DPL permits a reasonable fee to be charged. |
Retention Period | Personal data should not be kept for longer than is necessary to fulfil the purpose for which it was originally collected. Controllers must inform data subjects of the period of time (or reasons why) data will be retained on collection. | Not a requirement under DPL. However, as with the GDPR, if there is no compelling reason for a Data Controller to retain Personal Data, a data subject can request its secure deletion.rsonal data should not be kept for longer than is necessary to fulfil the purpose for which it was originally collected. Controllers must inform data subjects of the period of time (or reasons why) data will be retained on collection. |
Right to Erase | Should the individual subsequently wish to have their data removed and the Personal Data is no longer required for the reasons for which it was collected, then it must be erased. Data Controllers must notify third party processors or sub-contractors of such requests. | Same as GDPR. |
Transfers | International transfers permitted to third party processors or between members of the same group. | Same as GDPR. |
Data Security | Minimum security measures are pre-scribed as pseudonymisation and encryption, ability to restore the availability and access to data, regularly testing, assessing and evaluating security measures. | Appropriate technical and organisational measures must be taken to prevent unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data4. |
Data Processors | Security requirements are extended to data processors as well as Data Controllers. | There is no liability for processors under DPL. However, they may be held liable based on contract or tort law. |
Data Breach | Data Controllers must notify the regulatory authority of Personal Data breaches without undue delay and, where feasible, not later than 72 hours after having become aware of a breach. | In the event of a Personal Data breach, the Data Controller must, “without undue delay” but no longer than five (5) days after the Data Controller should have been aware of that breach, notify the Om-budsman and any affected individuals5. |
Breach Notice | The notification should describe the nature of the breach, its conse-quences, the measures proposed or taken by the Data Controller to ad-dress the breach, and the measures recommended by the Data Controller to the individual concerned to miti-gate the possible adverse effects of the breach. | Same as GDPR. |
Right to be Forgotten | An individual may request the deletion or removal of Personal Data where there is no compelling reason for its continued processing. | DPL contains a similar right, although this is expressed as a general right of “erasure”. Under the UK’s Data Protection Act, the right is limited to processing that causes unwarranted and substantial damage or distress. Under DPL this threshold is not present. As with the GDPR, if there is no compelling reason for a data controller to retain Personal Data, a data subject can request its secure deletion. |
Right to Object | An individual has the right at any time to require a Data Controller to stop processing their Personal Data for the purposes of direct marketing. There are no exemptions or grounds to refuse. A Data Controller must deal with an objection to processing for direct marketing at any time and free of charge. | Same as GDPR. |
Direct Marketing and Consent | The Data Controller must inform individuals of their right to object “at the point of first communication” and in a privacy notice. For any consent to be valid it needs to be obvious what the data is going to be used for at the point of data collection and the Data Controller needs to be able to show clearly how consent was gained and when it was obtained. | Including an unsubscribe facility in each marketing communication is recommended best practice. If an individual continues to accept the services of the Data Controller without objection, consent can be implied. |
Data Processors | The GDPR sets out more detailed statutory requirements to apply to the controller/processor relationship, and to processors in general. Data Pro-cessors are now directly subject to regulation and are prohibited from processing Personal Data except on instructions from the Data Controller. | Best practice would always be to put in place a contract between a controller and processor. Essentially, the contract should require the Data Processor to level-up its policies and procedures for handling personal data to ensure compliance with DPL. Use of sub-contractors by the service provider should be prohibited without the prior approval of the Data Controller6. |
Data Protection Officer | Mandatory if the core activities of the Data Controller consist of processing operations which require large scale regular and systematic monitoring of individuals or large scale processing of sensitive Personal Data. | Does not require the appointment, although this is recommended best practice. |
Penalties | Two tiers of sanctions, with maximum fines of up to €20 million or 4% of annual worldwide turnover, whichever is greater. | Refusal to comply or failure to comply with an order issued by the Ombudsman is an offence. Penal-ties are also included for unlawful obtaining or disclosing Personal Data7. Directors may be held liable under certain conditions8.
The Data Controller is liable on conviction to a fine up to CI$100,000 or imprisonment for a term of 5 years or both. Monetary penalty orders of an amount up to CI$250,000 may also be issued against a Data Controller. |
This publication is not intended to be a substitute for specific legal advice or a legal opinion. For specific advice, please contact your usual Loeb Smith attorney or any of:
E: gary.smith@loebsmith.com
E: ramona.tudorancea@loebsmith.com
E: vivian.huang@loebsmith.com
E: yun.sheng@loebsmith.com
E: elizabeth.kenny@loebsmith.com
- The Data Protection Law, 2017 (Law) was passed on 27 March 2017 and it is not yet in force.
- The comparison only includes provisions which may be relevant to offshore investment funds and is therefore not a comprehensive analysis.
- See Art. 6 of DPL
- See Schedule 1 of DPL
- See Art. 16 of DPL
- Under DPL, the Data Controller is liable for breaches and non-compliance, whereas processors may not be. It is therefore very important for a Fund’s Board of Directors to ensure that adequate contractual protections are in place.
- See Arts. 53-54 of DPL
- See Art. 58 of DPL
Voluntary liquidations generally
As the conclusion of 2018 approaches, clients should give some thought to whether or not they have Cayman entities which they wish to liquidate prior to the end of 2018 for, among other things, the purpose of avoiding annual government registration fees due in January 2019. A voluntary liquidator of a Cayman company or exempted limited partnership (ELP) is required to hold the final general meeting for that company or file the final dissolution notice for that ELP on or before 31 January 2019.
Voluntary liquidations – Funds registered with CIMA
Investment Funds which are registered with the Cayman Islands Monetary Authority (CIMA) should commence voluntary liquidation and submit documents to CIMA in order to have those Funds’ status change from “active” to “license under liquidation” by Monday, 31 December 2018 if they are to avoid their annual fees payable to CIMA for 2019. It is also important for investment funds registered with CIMA to give some thought to CIMA’s requirement for a final “stub” audit for the period of 2018 in respect of which the Fund operated before going into liquidation. CIMA may be reluctant to grant a partial year audit waiver for a liquidating Fund.
As an alternative to voluntary liquidation, some investment fund managers might be considering a wind down of one or more CIMA registered funds prior to the end 2018 and wish to de-register from CIMA or at least go into the status of “licence under termination” with CIMA in order to avoid or reduce annual registration fees payable to CIMA for 2019. If not already started, we recommend that action be taken now to begin this process.
For specific advice on voluntary liquidation of Cayman Islands’ entities or winding down in-vestment funds before 31 December 2018, please contact any of:
E gary.smith@loebsmith.com
E ramona.tudorancea@loebsmith.com
E yun.sheng@loebsmith.com
E vivian.huang@loebsmith.com
E elizabeth.kenny@loebsmith.com
The Cayman Islands Monetary Authority (“CIMA”) has extended the deadline for each CIMA registered Cayman domiciled investment fund which launched prior to 1 June 2018 to notify CIMA of the appointment of natural persons to act as its Anti-Money Laundering Compliance Officer (“AMLCO”), Money Laundering Reporting Officer (“MLRO”) and Deputy Money Laundering Reporting Officer (“DMLRO”) from 30 September 2018 to 31 December 2018. CIMA has clarified that CIMA regulated funds must still appoint these AML Officers by 30 September 2018 but now have until 31 December 2018 to notify CIMA of such appointments. Notification of the appointment of AML Officers to CIMA registered funds must take place via the CIMA REEFS portal.
CIMA has also clarified that each unregulated Cayman investment fund (and is therefore not registered with CIMA) which launched prior to 1 June 2018 now has until 31 December 2018 to designate entity specific AML Officers. Each Cayman investment fund launched from 1 June 2018 (“Post May 2018 Funds”) are expected to have AML Officers designated from the time of launch. Post May 2018 Funds which are required to register with CIMA will be required to register details of their AML Officers at the time of the fund’s registration with CIMA.
For specific advice on the appointment of AML Officers to your Cayman Islands’ investment funds, please contact any of:
E: gary.smith@loebsmith.com
E: vivian.huang@loebsmith.com
E ramona.tudorancea@loebsmith.com
E elizabeth.kenny@loebsmith.com
On October 25, Loeb Smith Attorneys’ Cayman Islands-based corporate lawyer Ramona Tudorancea will chair and moderate the panel titled “Caribbean Offshore Jurisdictions as Stepping Stones for Cross-Border Investments in the Americas“, scheduled as part of the Miami Fall Meeting of the Section of International Law of the American Bar Association and taking place at the JW Marriot Marquis, Met Ballroom 4, starting 4.30 PM.
Panelists include James H. Barrett from Baker & McKenzie LLP (Miami), Fernanda Bastos from Buhatem, Souza, Cescon, Barrieu & Flesch Advogados (Brazil), Pablo Falabella from Bulló Abogados (Argentina), Fabian A. Pal (Miami), and Kevin P. Scanlan from Kramer Levin Naftalis & Frankel LLP (New York).
The panel is sponsored by the Lawyers Abroad Committee (LAC), where Ms. Tudorancea currently serves as a Vice-Chair of Publications, and co-sponsored by the International M&A and Joint Venture Committee, the Latin America and Caribbean Committee, and the International Tax Committee.
The Cayman Islands have now brought into effect the long-awaited Limited Liability Companies Law, 2016 (the “LLC Law”) which introduces a new Cayman Islands limited liability company (an “LLC”). The LLC Law was published on 8th June 2016 but had not been brought into effect until 8th July 2016 in order to provide the Companies Registry with sufficient time to implement internal systems for dealing with registration of new LLCs. The Companies Registry is currently undertaking pilot testing of its internal systems and has advised that it expects to be able to accept registration applications for new LLCs before 15th July 2016.
Key Features of Cayman LLCs
- An LLC formed under the LLC Law will be similar in structure to that of the Delaware LLC as the LLC Law is broadly based on the Limited Liability Company Act in the State of Delaware. However, the LLC Law has also preserved the broad legal principles applicable to Cayman Islands companies and the rules of equity and common law. Section 3 of the LLC Law expressly states that: “The rules of equity and of common law applicable to companies registered in the Islands, as modified by the Companies Law and any other Laws in force in the Islands applicable to such companies, shall apply to a limited liability company, except in so far as such rules and law or modifications thereto are inconsistent with the express provisions of this Law or the nature of a limited liability company”.
- An LLC is a corporate entity which has separate legal personality to its members.
- Formation of an LLC is straightforward. It requires the filing of a registration statement with the Companies Registry and payment of the requisite Government fee.
- An LLC must have at least one member. It can be member managed (by some or all of its members) or the LLC agreement can provide for the appointment of persons (who need not be members) to manage and operate the LLC.
- The liability of an LLC’s members is limited. Members can have capital accounts and can agree amongst themselves (in the LLC agreement) how the profits and losses of the LLC are to be allocated and how and when distributions are to be made (similar to a Cayman Islands exempted limited partnership).
- An LLC may be formed for any lawful business, purpose or activity and it has full power to carry on its business or affairs unless its LLC agreement provides otherwise.
- An LLC may (but is not required to) use one of the following suffixes in its name: “Limited Liability Company”, “LLC” or “L.L.C.”.
- The following statutory registers are required to be maintained for an LLC but, similarly to the requirement for a Cayman Islands exempted company, only an LLC’s register of managers is required to be filed with the Companies Registry:
-
- a register of members;
- a register of managers; and
- a register of mortgages and charges.
The register of managers and register of mortgages and charges are required to be maintained in a manner similar to the register of directors and register of mortgages and charges for a Cayman Islands exempted company.
- Subject to any express provisions of an LLC agreement to the contrary, a manager of the LLC will not owe any duty (fiduciary or otherwise) to the LLC or any member or other person in respect of the LLC other than a duty to act in good faith in respect of the rights, authorities or obligations which are exercised or performed or to which such manager is subject in connection with the management of the LLC provided that such duty of good faith may be expanded or restricted by the express provisions of the LLC agreement.
Expected Benefits of the New LLC Vehicle
Under the LLC Law, it is now possible to:
- Form and register a new LLC;
- Convert an existing Cayman Islands exempted company into an LLC;
- Merge an existing Cayman Islands exempted company into an LLC; and
- Migrate an entity formed in another jurisdiction (e.g. Delaware) into the Cayman Islands as an LLC.
It is expected that the new Cayman Islands LLC structure will be attractive for general partner entities and other carried interest distribution vehicles. It may also prove attractive for management company entities and possibly for offshore funds in order to align the rights of investors between onshore and offshore investment funds in a master/feeder structures.
For Specific advice on Cayman Islands limited liability companies, please contact either of:
E: gary.smith@loebsmith.com
E yun.sheng@loebsmith.com
The Companies (Amendment) Law, 2016 which came into force on 13th May 2016 has abolished the ability of Cayman Islands exempted companies to issue bearer shares and other forms of negotiable shares.
Section 231A of the Companies Law states that:
- an exempted company may not issue any new bearer shares after May 13, 2016; and
- all existing bearer shares must be converted into registered shares before July 13, 2016 or they will be void.
Companies which have bearer shares in issue prior to May 13, 2016 are required to notify the beneficial owner of a bearer share or the relevant custodian of the abolition before July 13, 2016.
The outlawing of bearer shares and other forms of negotiable shares is part of a series of actions being taken by the Cayman Islands Government to the assist global efforts to tackle tax evasion and corruption and increase transparency.
This publication is not intended to be a substitute for specific legal advice or a legal opinion. It deals in broad terms only and is intended to merely provide a brief overview and general guidance only. For more specific advice on bearer shares issued by Cayman Islands companies, please contact:
The Cayman Islands Government has issued The Confidential Information Disclosure Bill, 2016 (“Confidentiality Bill”) which, once it comes into force will bring into effect a fundamental overhaul of confidentiality laws in the Cayman Islands.
The introduction of the Confidentiality Bill is part of a series of actions being taken by the Cayman Islands Government to the assist global efforts to increase transparency.
Existing Law
Under the existing law, which is found in The Confidential Relationships (Preservation) Law (2015 Revision), it is a criminal offence to divulge or attempt, offer or threaten to divulge “confidential information” (which is defined as including information concerning any property which the recipient thereof is not, otherwise than (in the narrowly construed exception of) “in the normal course of business”, authorised by the principal to divulge) except in a limited number of specified circumstances.
Notwithstanding the criminal penalties that follow a breach of the existing law, there has not been a criminal conviction under the existing law since its original enactment over 40 years ago.
The prohibition applies with respect to business of a professional nature (e.g. the relationship between a bank, trust company, an attorney-at-law, an accountant, an estate agent, an insurer, or a broker and its client) which arises in or is brought to the Cayman Islands and to all persons coming into possession of such information at any time thereafter whether they be within the jurisdiction or not.
As mentioned above, disclosure is permitted in a number of specified circumstances (e.g. (i) in respect of any professional person acting in the normal course of business, or with the consent, express or implied, of the relevant principal; or (ii) in response to statutory requests from certain criminal or regulatory authorities (e.g. the Cayman Islands Monetary Authority), or (iii) a court order).
Proposed new Law
The Confidentiality Bill proposes the following key amendments:
It will no longer be a criminal offence to breach a duty of confidentiality.
In future it will be necessary to assess whether the information imparted was subject to a duty of confidence in the first place. This will effectively shift the burden of proof from showing that the disclosure falls within an exception to the current prohibition, to showing that the information imparted was in fact subject to a duty of confidence.
Where a person owes a duty of confidence, that person’s disclosure of such information within a widened list of specified circumstances will not constitute a breach of the duty of confidence and a person will not be able to sue the discloser.
A person who discloses confidential information in relation to a serious threat to the life, health, safety of a person or in relation to a serious threat to the environment will have a defence to legal action for breach of a duty of confidence, as long as the person acted in good faith and in the reasonable belief that the information was substantially true and disclosed evidence of a serious threat to life, health, safety of a person or of a serious threat to the environment.
This publication is not intended to be a substitute for specific legal advice or a legal opinion. It deals in broad terms only and is intended to merely provide a brief overview and general guidance only. For more specific advice on the confidentiality laws in the Cayman Islands, please contact:
Gary Smith
Partner
E: gary.smith@loebsmith.com
Loeb Smith has acted as Cayman Islands counsel to China Crystal New Material Holdings Co., Ltd., the world’s largest synthetic mica manufacturer in respect of its IPO on the Korea Stock Exchange (KRX)’s KOSDAQ market. It is the first time in four and a half years since a Chinese company has entered the KRX. The company’s shares began trading on 28th January 2016.
The Loeb Smith team was led by Corporate Partner, Gary Smith.
For more information, please contact:
Gary Smith
Partner
E: gary.smith@loebsmith.com
www.loebsmith.com