External Privacy Notice - Department of Labour and Pensions
Department of Labour & Pensions External Privacy Notice
Version 1
Date of Current Version: 16 April 2026
Author: Data Protection Leader
Version Control Notice
This document is a controlled document that supersedes all previous versions. Please discard any previous copies of this document dated prior to the version date noted above this page.
Anyone who obtains an electronic or printed version of this document is responsible for ensuring that they have the latest version. The latest version of this document is available in the location set out above and can also be obtained by email on request to the Data Protection Leader on request to the Data Protection Leader as set out in section 11.
Privacy Notice
The Cayman Islands Government Department of Labour and Pensions (“DLP”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data in accordance with the Cayman Islands Data Protection Act (2021 Revision) (the “DPA”).
This Privacy Notice explains how DLP collects, uses, and protects your personal data when you interact with us.
On This Page
What Personal Data we collect
• Personal data we collect directly from you
• How we use your Personal Data
• How we share your Personal Data
• Our legal bases for processing your Personal Data
• Security and international transfers
• How long we keep your Personal Data
• Cookies
• Your rights
• Data Protection Principles
• How to contact us
• Changes to this Privacy Notice
Personal Data We Collect Directly From You
We collect personal data directly from you in the following ways:
• Information provided by you, your employer, or pension plan administrators through our systems
• Information shared when contacting us (email, phone, or in person)
• Documents or images submitted to us (including identification photos)
• Information included in forms, inquiries, or feedback
• Technical data collected when you use our website or services
How We Use Your Personal Data
DLP uses personal data to support its public functions and deliver services effectively. This includes:
• Implementing policies and delivering public services and programmes
• Facilitating your use of our systems and services
• Responding to inquiries and providing support
• Verifying identity to protect your information
• Improving user experience and service delivery
• Monitoring and improving digital services using aggregated data
• Preventing fraud and protecting public resources
• Producing statistical and operational reports
• Complying with legal obligations and exercising legal rights
How We Share Your Personal Data
We may share your personal data in accordance with the DPA and only where necessary.
Recipients may include:
1. Other public authorities Including Ministries, Departments, Statutory Authorities, and Government Companies for service delivery, identity verification, and legal compliance.
2. External data processors Service providers acting on our instructions, including those providing:
• IT services
• Records management and storage
• Communications support
• Security and fraud prevention
• Customer support services
3. Legal and regulatory disclosures Where required by law or necessary for:
• Legal advice
• Legal proceedings
• Audits and investigations
• Protection of legal rights
Our Legal Bases for Processing Your Personal Data
We process personal data under one or more of the following legal bases:
• Compliance with legal obligations
• Performance of public functions
• Contractual necessity
• Protection of vital interests
• Consent (where applicable)
• Legitimate interests
For sensitive personal data, additional legal conditions apply, including public interest functions and legal proceedings.
DLP does not knowingly collect personal data relating to children under the age of 18.
Security and International Transfers
We implement appropriate technical and organisational measures to protect your personal data, including:
• Multi-factor authentication
• Access controls (least privilege)
• Regular backups
• Security assessments
Where personal data is transferred outside the Cayman Islands (e.g., to the EU or other jurisdictions), we ensure adequate protection through legal safeguards such as contractual clauses or applicable exemptions under the DPA.
How Long We Keep Your Personal Data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and in accordance with the Labour Act (2021 Revision, and the National Pensions Act (2024 Revision) and other legislations which including the National Archive and Public Records Act (2015 Revision).
Cookies
We use cookies and similar technologies to improve your experience on our websites and services.
Cookies help us:
• Distinguish users
• Enable functionality
• Improve services through aggregated usage data
In most cases, cookies do not directly identify you.
Your Rights
Under the DPA, you have the right to:
• Be informed and access your personal data
• Request correction or deletion of inaccurate data
• Restrict or object to processing
• Object to direct marketing (not currently conducted by DLP)
• Challenge automated decision-making
• Lodge a complaint with the Ombudsman
• Seek compensation through the courts
We may need to verify your identity before processing requests and may refuse or charge a reasonable fee for excessive or unfounded requests where permitted by law.
To learn more about your rights, you may visit www.ombudsman.ky
Data Protection Principles
DLP adheres to the eight Data Protection Principles under the DPA:
1. Fair and lawful processing
2. Purpose limitation
3. Data minimisation
4. Accuracy
5. Storage limitation
6. Respect for individual rights
7. Security (confidentiality, integrity, availability)
8. Restrictions on international transfers
How to Contact Us
DLP has appointed a Data Protection Leader.
If you have questions, concerns, or wish to exercise your rights, please contact:
Name: Ava-Marie Parkinson
Telephone: 244-4011
Email: FOI.DLP@gov.ky
Address: 2nd Floor, Midtown Plaza
273 Elgin Avenue, George Town
We aim to respond to all inquiries in a timely and respectful manner.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Updates will be published and, where appropriate, communicated directly to you.
Last updated: 16 April 2026
