Contributed By Appleby
As one of the foremost offshore financial centres, home to approximately 70% of the world’s offshore investment funds and with an absence of any direct taxation on companies or individuals, the Cayman Islands has become an attractive destination for technology entrepreneurs. While much of Cayman’s financial services legislation was written before the recent blockchain revolution began, the last few years have seen the Cayman Islands take a number of legal and regulatory steps to make the Islands a jurisdiction that will allow such innovation to thrive. Cayman’s ambition to become a global technology hub is also supported by a sound legal framework, a wealth of experienced professional service providers, a modern infrastructure, state-of-the-art communication systems and a stable political climate.
The Cayman Islands proved a popular choice for issuers of virtual assets during the initial coin offering boom of 2017–18. During the “Crypto Winter” that followed, Cayman’s flexible business-orientated legislation, multitude of potential issuer vehicle types, and internationally recognised securities regulatory regime enabled the Islands to pivot away from crowdfunded platforms towards security tokens and stablecoins, which provided greater value stability and more predictable investment returns. This same flexibility means that Cayman is well placed to take advantage of the latest shift towards securitising common assets and decentralised finance (DeFi) products, with Cayman already being the offshore centre of choice for other securitisation issuers.
Framework legislation regulating virtual asset service providers came into force on 31 October 2020 and has already attracted a number of new entrants to the Cayman market. A technology-neutral regulatory sandbox is expected in Q4 2021 and is expected to further attract companies operating in this fast-moving sector to establish themselves in Cayman.
First amongst the leading offshore jurisdictions, Cayman established a technology park within its existing special economic zone (SEZ) to allow technology companies to benefit from specific advantages, including zero-taxes and fast-tracked work permit applications for relocating employees.
The pressures created by the COVID-19 outbreak on global trade systems highlighted the urgent need to maintain and strengthen the resilience of international supply chains. This resilience depends on trust, transparency and integrity, which can be improved through the responsible deployment of blockchain technologies. With applications to join the technology park within the SEZ at an all-time high, it is anticipated that Cayman will continue to benefit from technology companies looking to respond to this shift and establish themselves in a tax neutral jurisdiction.
A new administration in place in the USA and increased pressure from proposed EU tax and regulatory reforms could impact Cayman’s current flexibility in this space going forward. In particular, further changes to the economic substance requirements introduced in Cayman in 2019 could have an impact.
New technologies have not yet displaced traditional financial service providers in Cayman. Cayman Finance, a group that represents Cayman’s financial services sector, has established an innovation lab to engage with the financial services industry, regulators, the government and the media to promote the development and use of new technologies in the Islands.
Given Cayman’s stringent know-your-customer (KYC) requirements, a number of service providers have adopted technologies to enable the onboarding of clients and the collection of KYC digitally.
Informal conversations have also started concerning a potential framework of laws, developed under Cayman Finance and the Cayman Islands Monetary Authority (CIMA) that might direct new technologies towards the institutional market.
Tokenised funds have proved increasingly popular in recent years. In a tokenised fund, an investor’s interest is represented by a cryptographic token, as opposed to shares or other interests or units offered to investors in a more traditional fund structure.
Whilst adoption within the Caribbean is slow, we are seeing a growth in awareness and use of decentralised finance (DeFi) protocols and, in particular, a heightened awareness and understanding among corporate service providers who cater for entities registered in Cayman and who utilise DeFi protocols.
To date, the use of DeFi protocols is not regulated, except where they can be established to fall within existing regulation (see 2.1 Regulatory Overview) but by the very nature of decentralisation, regulators would find it difficult to regulated truly decentralised products.
The Virtual Asset (Service Providers) Act
The Virtual Asset (Service Providers) Act (VASP Act), came into force in October 2020. The VASP Act is intended to provide a flexible foundation to promote the use of new technology and innovative enterprise in the Cayman Islands while complying with newly adopted international standards set by the Financial Action Task Force (FATF). The new legislation provides for the supervision of persons and entities facilitating virtual asset activities as a business.
Under the VASP Act a “virtual asset” is defined as a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes, but does not include digital representations of fiat currencies.
“Virtual asset services” are businesses providing one or more of the following services or operations:
Under the VASP Act, from 31 October 2020, all virtual asset service providers (VASPs) need to apply and register with the Cayman Islands Monetary Authority (CIMA). When phase two of the VASP Act comes into effect (expected June 2021) virtual asset custodial services and exchange or trading platforms will need to apply to CIMA for a VASP licence.
The VASP Act provides for various exceptions including:
Under the VASP Act, VASPs are subject to a number of general obligations including:
The VASP Act also provides a framework for a technology-neutral regulatory sandbox. The sandbox is expected to come into effect in Q4 2021 and further details are still awaited.
The Securities Investment Business Act
The primary piece of legislation regulating securities and investment business in the Cayman Islands is the Securities Investment Business Act (SIBA). SIBA provides for the licensing and control of persons engaged in securities investment business in or from the Cayman Islands. Importantly, SIBA is essentially consumer protection legislation, designed to protect the investing public and to be construed broadly. When determining whether a business activity is caught by SIBA, therefore, the emphasis is on substance rather than form.
SIBA sets out an exhaustive list of financial instruments that constitute "securities". In 2020, SIBA was amended to include virtual assets in that list. A virtual asset that can be sold, traded or exchanged and that represents, can be converted into or is a derivative of any of the existing SIBA listed securities will also qualify as a security although certain exemption may still apply.
The Cayman Islands has long been committed to implementing best international practices and is compliant with the anti-money laundering and anti-terrorist financing requirements of the OECD and FATF. As a member of the Caribbean FATF, the Cayman Islands implements recommendations promulgated by the FATF.
All Cayman Islands-incorporated entities are subject to the Proceeds of Crime Act which sets out the principal money laundering offences. Importantly, businesses in the Cayman Islands need to adopt a risk-based approach to the collection of know-your-client (KYC) information. Under the risk-based approach, the latest guidelines from the FATF permit the digital verification of identities and receipt of electronic copies of documents instead of traditional “wet ink” paper-based processes.
Certain "relevant" businesses (which would include, for instance, entities caught within Cayman financial services regulations (including VASPs) and other entities thought to be at a higher risk of money laundering) are further subject to the Anti-Money Laundering Regulations which prescribe certain identification, record keeping and internal control procedures for such businesses.
CIMA provides oversight for investment funds, entities caught by SIBA and also oversees the new VASP Act and, when it comes into effect in late 2021, participants in the proposed regulatory sandbox.
The Blockchain Association of the Cayman Islands was established to promote the use of blockchain-based solutions in the Cayman Islands, to facilitate collaboration in the space and to lobby to the government and regulators.
Cayman Finance, a group that represents Cayman’s financial services sector has established an innovation lab to engage with the financial services industry, regulators, the government and the media to promote the development and use of new technologies in the Islands.
There have, to date, been no important judgments in the blockchain area.
There have, to date, been no important enforcement actions in the blockchain area.
A technology neutral regulatory sandbox forms part of the VASP Act and expected to be introduced in late 2021. The aim of the sandbox is to encourage, foster and incubate companies operating in this fast-moving sector. CIMA will have regulatory oversight of sandbox participants. Please see 2.1 Regulatory Overview.
The Cayman Islands government has already established the SEZ, which enables technology companies from outside Cayman to easily and cost-effectively set up and operate in the Islands with a genuine physical presence.
The benefits of being a resident in the SEZ include:
The Cayman Islands is a tax-neutral jurisdiction. There is no income tax, wealth tax, profits tax, capital gains tax, payroll tax, social security contribution (aside from mandatory pension contributions for employers and their employees) or corporate tax in the Cayman Islands. A registered Cayman Islands entity is not subject to any direct taxes. There may, however, be tax implications for beneficial owners in their own jurisdiction.
Please refer to 2.4 Self-regulatory Organisations.
While we are not aware of this being tested in the Cayman courts, we would anticipate that ownership of a digital asset will be determined by who holds the private key required to access and transfer that asset. This will be subject to particular circumstances, for example:
Subject to contractual terms, we would expect transfers to be considered final once they have reached finality on the blockchain and are credited to the wallet of the recipient to which they hold a key (regardless of whether these can be transferred).
Where digital assets represent shares in a Cayman company, legal title to the underlying shares represented by the token will be determined (in the absence of fraud, manifest error, or other extraordinary circumstances) by reference to the company’s register of members. A Cayman company’s constitutional documents will usually oblige the company to treat the holder entered on the register of members as the sole person entitled to the shares, including any voting rights and dividend payments in respect thereof. In our experience, issuers of security tokens will implement a system designed so that the company’s register of members will be updated, automatically, to record the transfer of each share upon any transfer of the corresponding token such that there should never be a split in ownership of the token and underlying share.
Virtual assets which represent securities under SIBA may result in issuers, custodians and other service providers being required to be licensed (please see 2.1 Regulatory Overview).
Please refer to 3.2 Categorisation.
There are currently no restrictions, subject to AML compliance.
In the Cayman Islands, NFTs have found increased popularity through wealthy individuals with a broad risk appetite seeking out new investment opportunities. NFTs are attractive to these investors because they come with the reassurance, via the blockchain, that the NFT is the only authentic one of its kind.
Currently, the Cayman Islands Stock Exchange is the only exchange permitted to operate in the Cayman Islands but at the time of writing (June 2021) we understand a number of exchanges (both custodial and decentralised) have applied to be registered under the VASP Act.
Please see 4.1 Types of Markets.
To the extent that cryptocurrencies can be both purchased with, and redeemed for, fiat currencies via a Cayman entity, such transmission is likely to fall within the VASP Act and potentially also within either the currency exchange or money transmission provisions of the Money Services Act and therefore require a licence.
Please see 2.2 International Standards.
Please see 2.1 Regulatory Overview.
Please see 4.1 Types of Markets.
Cayman entities providing storage solutions for cryptographic keys, either online or offline now need to be registered under the VASP Act and, under phase two of that Act, will require a separate licence.
Please see 2.1 Regulatory Overview.
Please see 2.1 Regulatory Overview.
There is no separate framework for the regulation of funds that invest in virtual assets in the Cayman Islands.
The primary piece of legislation in the Cayman Islands relating to open-ended investment funds is the Mutual Funds Act. A “mutual fund” is defined as a common investment vehicle which issues equity interests (such as tokens in a tokenised fund structure) that allows participation amongst a pool of investors in the profits or gains of that vehicle’s investments and which is redeemable at the option of the investor.
The Private Funds Act, 2020 and the Mutual Funds (Amendment) Act, 2020 came into force in the Cayman Islands on 7 February 2020. These laws expand the regulatory reach of CIMA, bringing closed-ended funds and previously exempted mutual funds (ie, open-ended funds with not more than 15 investors, the majority of whom have the power to appoint and remove the operators) into the scope of a regulatory framework. Such funds are now required to register with CIMA, pay an annual fee and file prescribed documentation.
Please see 2.1 Regulatory Overview.
There are no laws, regulations or Cayman judicial decisions addressing the enforceability of smart contracts.
Provided that the defining features of a contract are present – offer, acceptance, the intention to be legally bound and consideration – our view is that smart contracts are capable of satisfying the requirements for a binding contract and are enforceable by the courts.
Arguably the role of contractual interpretation for smart contracts written wholly in computer code may be limited as the language (in this case code) will typically be clear and unambiguous, although issues may arise where the code is ill-defined.
The Electronic Transactions Act (ETA) puts electronic signatures on an equal footing with "wet ink" signatures in the Cayman Islands.
Technologically neutral, the ETA was established to promote public confidence in the validity, integrity and reliability of conducting transactions electronically and recognises electronic records as records created, stored, generated, received or communicated by electronic means.
The ETA is not prescriptive as to the method of authentication protocol used. An electronic signature will be considered to be reliable where:
Although the point remains untested in Cayman, our view is that developers of blockchain protocols are not fiduciaries. The role played by protocol developers in the governance of public blockchain networks does not pose the risks of abuse that characterise traditional legal fiduciaries and therefore does not require the imposition of fiduciary duties.
We would also add that the risk of developer abuse in a publicly governed blockchain is minimal. By its nature, each update to the open-sourced code is analysed and tested by other network participants who have a significant economic interest and the technical abilities to audit the code before implementing it.
Decentralised finance (DeFi) products are subject to compliance with the VASP Act and SIBA. Please see 1.3 Decentralised Finance Environment and 2.1 Regulatory Overview.
We are not aware of any case law in the Cayman Islands regarding whether digital assets will be treated as "property", but we expect the Cayman courts would be persuaded by English court rulings and the findings of the UK Jurisdiction Taskforce on the legal status of digital assets. As such, we think it likely that digital assets would be treated as property in Cayman and, consequently, could be the subject of a fixed or floating charge. In order to ensure the effectiveness of any such charges, lenders should consider taking custody of digital keys.
Where tokens are held by obligors through a custodian or other agent, security could be taken over the rights that obligor has against that custodian or agent. We would expect an assignment of rights to be governed by the same governing law as the custody or agency agreement.
Where tokens represent underlying shares of a Cayman company or interests of a limited liability company (LLC), we would expect security to be taken in the Cayman Islands in the usual way that security is taken over the equity interests of such an entity type, which is typically by way of an equitable share mortgage or charge.
There is no general central registry in Cayman for the public registration of charges. However, Cayman companies and LLCs are required to maintain a register of mortgages and charges at their registered office in the Cayman Islands, and an LLC is required to maintain a register of security interests at its registered office in the Cayman Islands in which shall be registered any security interests taken over the interests of such an LLC.
Please see 4.6 Wallet Providers.
Cayman’s Data Protection Act (DPA) came into full force on 30 September 2019. Drafted around a set of EU-style data protection principles to which data controllers must adhere, personal data must be collected in a fair and transparent manner and only be used and disclosed for purposes properly understood and agreed to by data subjects. Any personal data collected must be adequate, kept up-to-date and should not be retained for longer than is necessary to fulfil the collection purpose.
The DPA introduces globally recognised principles about the use of personal data to the Cayman Islands. The DPA aligns the Cayman Islands with other major jurisdictions around the world, notably the EU, and thereby facilitates the free flow of data – a prerequisite for the Cayman Islands being an equal and competitive participant in today’s globalised economy.
Importantly, the DPA provides a standard framework for both public and private entities in the management of the personal data they use. Internationally active organisations will find many similarities between the data protection law of the Cayman Islands and those of other jurisdictions where they are active. The DPA aims to reduce the administrative burden of operating internationally and cement the Cayman Islands as an attractive jurisdiction in line with international developments.
The DPA also serves as a guide to provide assurance to individuals whose personal data is being processed. Indeed, where individuals feel that they are empowered to manage and control their personal data, they are more likely to share personal data with an organisation, to the benefit of both parties.
The Office of the Ombudsman is the Cayman Islands’ supervisory authority for data protection.
Please see 8.1 Data Privacy.
There are currently no restrictions on the use of mining, however, given the high utility costs on the Islands, large-scale mining would not be viable.
There are currently no restrictions on the staking of tokens.