CAYMAN ISLANDS: An Introduction to Fintech Legal
Introduction
The Cayman Islands has been the leading offshore jurisdiction for the establishment of mutual funds and private funds for more than 30 years. Its reputation has been due in part to the use of innovative legislation and the absence of taxation and exchange controls. This, together with the presence of sophisticated and professional service providers, has resulted in the jurisdiction’s reputation for responsible supervision and regulation of funds. In addition, the Cayman Islands has introduced innovative legislation to regulate virtual asset service providers, opening the doors to this expanding market. It is no surprise therefore that when fund managers and virtual asset service providers are looking for the best jurisdiction to establish alternative funds investing in cryptocurrencies, Web3 and blockchain products and to set up digital asset entities, the Cayman Islands is the jurisdiction of choice.
The Cayman Islands is home to both regulated mutual funds (open-end) and regulated private funds (closed-end), both of which may be utilised in cryptocurrency and blockchain structures and are explained in more detail below.
The Cayman Islands has seen a significant rise in the number of fintech funds being established in recent years. Along with the establishment of the special economic zones and the introduction of modern legislation such as the Special Economic Zones Act (as Revised) (the "SEZA") and regulations for virtual asset service providers such as the Virtual Asset (Service Providers) Act (as Revised) (the "VASPA"), the jurisdiction has emerged as a global hub for digital assets, particularly for digital asset funds and virtual asset entities.
Fund and Structure Types
As mentioned above, the Cayman Islands is home to both regulated mutual funds (open-end) and regulated private funds (closed-end), both of which may be utilised in cryptocurrency and blockchain structures.
Mutual funds
Mutual funds are regulated under the Mutual Funds Act (as Revised) (the "MFA"). The MFA defines a mutual fund as a company, unit trust or partnership that issues equity interests, the purpose or effect of which is the pooling of investor funds with the aim of spreading investor risk and enabling investors to receive profits or gains from the acquisition, holding, management, or disposal of investments. Equity interests are defined as a share, trust unit, or partnership interest or any other representation of an interest that carries an entitlement to participate in the profits or gains of the company, unit trust, or partnership, as the case may be, and which may be redeemed or repurchased at the option of the investor.
The MFA applies to all open-end funds (funds in which the investors have the right to redeem their interests at their option), except those specifically excluded from regulation. Therefore, funds that issue tokens which carry an entitlement to participate in the profits or gains of an entity will require registration under the MFA if they are redeemable at the option of the holder.
Types of regulated mutual funds
There are at least six types of mutual funds that are subject to regulation and supervision under the MFA by the Cayman Islands Monetary Authority (CIMA) but the one most popular for digital asset funds is the registered mutual fund which has a streamlined registration procedure where:
- the initial minimum equity interest purchasable by an investor is USD100,000; or
- the equity interests are listed on an approved stock exchange such as the Cayman Stock Exchange.
Requirements for all registered mutual funds
All regulated mutual funds are required to:
- submit a current copy of the fund-offering document to CIMA – the offering document must describe the equity interests offered to investors in all material respects and must contain such information as is necessary to enable a prospective investor to make an informed decision as to whether or not to purchase the equity interests;
- submit to an annual audit and file accounts within six months of the end of the fund’s financial year – this will involve appointing an auditor in the Cayman Islands where all of the major accounting firms are represented;
- pay a prescribed annual registration fee; and
- comply with all corporate governance and ongoing regulatory compliance.
Director registration
Directors of registered mutual funds and master funds (if applicable) are required to register with CIMA and maintain such registration on an annual basis pursuant to the Directors Registration and Licensing Act (as Revised). Directors must also actively deregister from CIMA where such registration is no longer required (or they will be subject to ongoing annual fees until such time as they deregister).
Private funds
Private funds are regulated under the Private Funds Act (as Revised) (the "PFA"). The PFA defines a private fund as a company, unit trust, or partnership that offers or issues or has issued investment interests, the purpose or effect of which is the pooling of investor funds with the aim of enabling investors to receive profits or gains from such entity’s acquisition, holding, management, or disposal of investments, where:
- the holders of investment interests do not have day-to-day control over the acquisition, holding, management, or disposal of the investments;
- the investments are managed as a whole by, or on behalf of, the operator of the private fund, directly or indirectly; and
- the PFA applies to all closed-end funds (funds in which the investors do not have the right to redeem their interests at their option), except those specifically excluded from regulation.
Types of entities available
There are many vehicles available in the Cayman Islands, through which to operate a mutual fund or private fund. The fund can be structured as an exempted company with limited liability, a segregated portfolio company (SPC), a limited liability company, partnership or a unit trust. Each of these structures is quick to set up and easy to maintain.
Segregated portfolio companies
The vehicle which has found the most traction for crypto-funds is the SPC. An SPC is one legal entity with different “pots” or “pools” called “segregated portfolios”, the assets and liabilities of which are separated and protected (under Cayman Islands status) from the liability of all other segregated portfolios in the same SPC. The principal advantage of an SPC over a standard exempted company is to protect the assets of one segregated portfolio from the liabilities of all other segregated portfolios. This has been particularly attractive for digital asset funds where many classes of assets are traded, and some have significantly more risk than others. The fund managers naturally wish to isolate the risk of the different strategies and the SPC structure provides the mechanism for this.
The Companies Act (as Revised) of the Cayman Islands (the “Companies Act”) states that a creditor will only have recourse to assets from segregated portfolios with which it has contracted, and creditors will have no recourse to the assets of other segregated portfolios of the SPC which are protected under the Companies Act. The Articles of Association of the SPC will have provisions which reflect the Companies Act in this respect.
The benefit of SPCs highlighted above facilitates a more streamlined offering structure for certain mutual funds, enabling SPCs to be used to structure platforms from which multiple managers can be quickly onboarded into their own segregated portfolio in a structure that has all its service providers already selected and in place.
Exempted company
The exempted company is a form of limited liability company and is the most common structure used by VASP entities. It provides a number of benefits including: being a body corporate with separate legal personality, limited liability protection, shares which may be issued with nominal or no par value, no requirement to keep its register of members open for public inspection, and no requirement for Cayman resident shareholders or directors.
Foundation company
A foundation company is often the preferred choice for a decentralised autonomous organisation (DAO) and developer entities (as detailed further below). The popularity of foundation companies is attributed to several key factors including: being a body corporate with separate legal personality; limited liability protection; the flexibility of a trust (it acts as a hybrid structure which sits between a company and a trust or a civil law foundation in its characteristics); no requirement to have shareholders (thereby fostering a decentralised model); it can be established for any lawful purpose, whether commercial, charitable/philanthropic or private purposes, or any combination of these; and there is no requirement for Cayman resident shareholders or directors.
Digital asset investment trends
The Cayman Islands has made a number of legal and regulatory advancements that now make it a leading jurisdiction for blockchain, cryptocurrency and Web3 entities. Entities which are most common in the current marketplace include:
- token issuers;
- virtual asset trading platforms;
- DAOs;
- decentralised finance;
- IP holding companies; and
- centralised and decentralised exchanges.
The Virtual Asset (Service Providers) Act and registration
Since the introduction of the VASPA, the Cayman Islands has seen a steady increase in the number of virtual asset service provider entities establishing businesses, exchanges, platforms, crypto-funds, protocols, and innovative technology companies under the new regulatory regime.
These laws form part of a regulatory framework to promote the development and use of innovative financial services (the “Framework”). The Cayman Islands Ministry of Financial Services has stated that the Framework seeks to provide regulatory certainty and a solid foundation for legitimate financial services innovators who are operating in, or from within, the Cayman Islands, while also complying with emerging global standards surrounding virtual assets.
The VASPA applies to any persons or entities involved in providing “virtual asset services”. Under the VASPA, virtual asset services are defined as the issuance of virtual assets or the business of providing one or more of the following services or operations for, or on behalf of, a natural or legal person or legal arrangement:
- exchange between virtual assets and fiat currencies;
- exchange between one or more other forms of convertible virtual assets;
- transfer of virtual assets;
- virtual asset custody service; or
- participation in, and provision of, financial services related to virtual asset issuance or the sale of a virtual asset.
Any organisation offering these virtual asset services (including an existing security token offeror), which does not require a licence (eg, trading platforms and custodians), will be required to register with CIMA and pay the required assessment and annual fees.
Token issuers
A token issuer can be set up as a standalone entity to issue tokens or non-fungible tokens (NFTs), or more commonly as a subsidiary of a second entity that develops the platform or protocol (the “developer”) and in this way, much of the regulatory liability of the token issuer is separated from the value built up in the developer entity. Many Web3 and blockchain companies choose an exempted limited company as the tax-neutral vehicle to be the token issuer, but for the developer there are a number of choices when it comes to which entity to use:
- an exempted limited company which provides limited liability protection;
- a Cayman Islands special economic zone company (SEZC) which would also provide limited liability protection together with additional benefits (as detailed further below);
- a Cayman Islands foundation company which provides limited liability protection with the flexibility of a trust (as detailed further below); or
- if the developer or platform entity has already been formed in a jurisdiction outside the Cayman Islands, then that entity may be used.
Where a dual-entity structure is used, careful consideration should be given to the documentation of the commercial relationship between the entities. Licensing agreements, development agreements, service agreements, or other commercial agreements are crucial as they ensure that it is clear – to investors, regulators, and other interested parties – what role each entity is undertaking within the group.
Platform controlling entities
An entity that controls a platform that only provides a forum where sellers and buyers may post bids and offers, or a forum where the parties trade in a separate platform or in a peer-to-peer manner, will be exempted from the requirement to obtain a licence from CIMA under the VASPA. This kind of platform-controlling entity could be formed using any one of the previously described legal forms, but most commonly would use an exempted company.
Decentralised autonomous organisations (DAOs)
Combining the limited liability protections of a corporate entity with the flexibility of a trust, the Cayman foundation company provides DAO projects with a very user-friendly option. Foundation companies, unlike trusts or partnerships, have separate legal personality, can hold assets, assume obligations, and sue and be sued. However, a key distinction of a foundation company is that it can be structured without shareholders, and so does not have a clear “owner”. In place of shareholders, the foundation company can be supervised by a supervisor (or even multiple supervisors if desired). A supervisor has no ownership or economic entitlement in the foundation company but simply acts as a steward, ensuring that the directors of the foundation company observe their obligations to the DAO pursuant to the foundation company’s governing documents. Therefore, with no shareholders, all the officers of a foundation company simply have the objectives of the DAO as their priority – similar to trustees and enforcers carrying out the objectives of a trust. Foundation companies are covered further below.
For Web3 projects looking to issue virtual assets privately, the foundation company is also able to represent the DAO. The VASPA only regulates the sale of virtual assets to the public. Private sales which are not advertised and made available to a limited number of persons who are each selected prior to the sale by way of a private agreement, may well fall outside the scope. Furthermore, as the definition is limited to sales for consideration, airdrops and bonus issues should also be excluded.
The special economic zone (SEZ)
An SEZC is a special form of Cayman Islands company which is licensed and permitted to operate from within the SEZ and which offers a streamlined process to establish a physical presence in the Cayman Islands quickly and efficiently. Of note for digital asset investors and businesses, the establishment of Cayman Technology City within the SEZ offers technology companies looking to expand in the Cayman Islands a unique set of benefits that are not extended to other local companies, such as:
- no requirement to maintain a trade and business licence;
- no requirement for Caymanian majority control of the business;
- no restrictions on the transfer of any investment in or by an SEZC within the SEZ;
- no restriction on investing in another SEZC;
- expedited grant of five-year work permits;
- expedited set-up within ten days;
- exemption from direct or indirect taxes; and
- exemption from certain import duties and fees.
Using Cayman Technology City and the benefits of the SEZ, companies can quickly and cost-effectively establish a genuine physical presence offshore with staffed offices within the SEZ. This has become a popular trend among technology companies establishing in the Cayman Islands and has contributed to the significant growth of the jurisdiction in the digital assets market.
Decentralised finance (“DeFi”)
The Cayman Islands has long been a jurisdiction of choice for a variety of financial products and its flexible regulatory environment is ideal when using an exempted company or foundations to accommodate the latest shift towards a variety of DeFi products. For DeFi projects, the foundation company can provide a legal “wrapper” with corporate personality. In this role the foundation company can undertake many of the real-world activities required by the DeFi project.
For example, the foundation company can act as a service provider for DeFi projects by signing documents and engaging developers or consultants on behalf of the project. It can also act as a fundraising vehicle for early stage and VC private funding (something expressly provided for by the VASPA) or it can hold a DeFi project’s treasury assets to pay for services that are needed on an ongoing basis. The foundation can also act as the entity that opens and operates a bank account for fiat currency if this is required.
This can also provide a vehicle for airdrops, which can be an effective way to promote decentralisation, and grants to support those interested in helping a project. The company can also provide marketing and development services for NFTs, play-to-earn (P2E) games, and metaverse projects.
A foundation company also provides a corporate parent or holding entity for subsidiaries, potentially formed in other jurisdictions, to be formed. These subsidiaries can then carry out functional activities for the project if they are better suited to the particular circumstance of that activity. DeFi products are subject to compliance with the VASPA.
Intellectual property holding companies
In addition to either the token or coin offering structures, and sometimes as a complementary entity to a DAO, some clients wish to incorporate a separate entity to separate IP holding companies or separate software operators. This choice is often driven by the preferences of each business, its risk appetite, and its tax considerations.
The preferred vehicle for an entity established to hold Web3 intellectual property is an exempted limited company. Any vehicle established for the sole purpose of holding, exploiting, or receiving income from intellectual property assets will not be required to register with CIMA under the VASPA, but it will be required to satisfy an extended economic substance test under the International Tax Co-operation (Economic Substance) Act (as Revised) (the “ESA”).
Regulatory Requirements
AML and corporate governance – an evolving landscape
The Cayman Islands has emerged as a prominent offshore financial centre, attracting a myriad of international businesses and investment funds. To maintain its reputation as a transparent and well-regulated jurisdiction, the Cayman Islands has established a robust regulatory framework that encompasses both anti-money laundering (AML) and corporate governance. These regulations are crucial in ensuring the integrity and stability of the financial sector, while also complying with global standards set by international bodies such as the Financial Action Task Force (FATF) and the OECD. In this dynamic regulatory landscape, businesses operating in the Cayman Islands must adhere to stringent AML requirements and corporate governance practices, making it essential for companies to navigate these complexities effectively to thrive in this jurisdiction.
Corporate governance updates
In an effort to maintain the Cayman Islands’ regulatory framework standard to that of FATF and the OECD, CIMA has brought into force its new Corporate Governance Rule (CGR) and Internal Controls Rule and Statement of Guidance (SOG). The CGR and SOG apply to all CIMA-regulated entities, introducing binding obligations and the potential for fines and regulatory action in case of breaches. The following information explains the key provisions of these new rules, highlighting their implications and outlining the requirements that entities must meet to ensure compliance.
Corporate governance rule
The CGR mandates that the corporate governance framework of CIMA entities should be proportionate to their size, complexity, structure, nature of business, and risk profile. This rule places a strong emphasis on proper management oversight and the protection of relevant stakeholders’ interests. Key provisions of the CGR include:
- Governing body meetings – regulated entities are required to convene governing body meetings at least once a year. These meetings are expected to discuss the composition of the governing body and the entity’s policies and objectives.
- Outsourcing oversight – even when outsourcing occurs, responsibility remains with the governing body, which must designate a person responsible for reporting on all compliance matters. Depending on the business structure, this requirement may be delegated via reports.
Internal Controls Rule and Statement of Guidance
The Internal Controls Rule and SOG aim to secure assets, maintain precise records, and yield dependable financial, operational, and regulatory reports. This rule consists of two parts.
Part I: General rules and guidelines – part I sets principles applicable to all regulated entities. It highlights five fundamental aspects of internal control, including control environment, risk assessment, control activities, information and communication, and monitoring activities.
Part II: Sector-specific rules and guidelines – part II focuses on distinct sectors, such as trust companies, company managers, corporate services providers, and securities investment businesses. This segment provides sector-specific regulations and guidelines to ensure each part of the regulated entity’s adherence.
CIMA acknowledges that regulated entities may outsource functions or be part of larger groups. In such instances, they can rely on service providers or group controls, subject to certain conditions. The governing body must prove to CIMA that the service provider’s internal control system aligns with the Internal Controls Rule and SOG. This may necessitate confirmation from the service provider and a gap analysis to ensure compliance with local requirements. Entities within a group may depend on the group’s internal control system. However, the governing body must ensure that the group’s controls are harmonised with the structure of the regulated entity.
To comply with the new CIMA rules, regulated entities must prioritise the following:
- documentation – maintain well-documented internal control systems to monitor and prove compliance;
- training – regularly update staff training to align with policies, procedures, and legal requirements;
- committees – establish compliance and audit committees to oversee governance and controls;
- outsourcing – ensure service providers meet internal control and SOG requirements through gap analysis; and
- risk assessment – identify and mitigate material risks by developing effective control activities in line with policies.
The Future of Fintech in the Cayman Islands
The VASPA together with the SEZA are pushing the boundaries of possibilities for Web3 and other digital asset products available in the Cayman Islands. In addition to a supportive and well-regulated environment, the jurisdiction offers many flexible legal structures, such as exempted companies and foundation companies, that can be utilised by cryptocurrency, Web3, and blockchain initiatives. Further, the SEZ provides a practical solution to those businesses seeking to establish a physical presence in the jurisdiction. With these factors combined, the Cayman Islands is poised to become a key player in the future of digital finance.
***
This publication is for general guidance and is not intended to be a substitute for specific legal advice. Specialist advice should be sought about specific circumstances.