Law: The Data Protection Act No.18 of 2023

Regulator: The Data Protection Office not yet established.

Summary: On August 16, 2023, the Data Protection Act No.18 of 2023 (the Act) received Presidential assent and will come into effect on the day the Minister responsible for data protection may, by order, determine. The Act regulates the collection, keeping, processing, use, and dissemination of personal data and establishes data protection principles as well as legal basis for the processing of personal data.

The Act also introduces specific requirements for data controllers and processors including conducting Data Protection Impact Assessments, appointing a data protection officer, registering with the Data Protection Office, and maintaining records of processing. Furthermore, the Act creates specific restrictions on the transfer of personal data outside of Guyana and provides data subjects with rights including rectification, access, erasure, and data portability.