Data Protection Act (2023)

The Data Protection Act regulates the collection and use of personal data in Guyana and designates “sensitive personal data” to include information about a data subject’s sexual orientation, sexual life, and health status. Processing of sensitive data is restricted to specified purposes that include providing goods or services to the data subject and monitoring behavior when lawful and necessary. The statute establishes heightened protections for categories that directly affect women and LGBTQ persons. It requires data controllers to justify the processing of sexual orientation or sexual life data and to apply safeguards that limit unauthorized access, misuse, or disclosure. The protections are material in contexts involving gender-based services, health care, digital monitoring, and other settings where intimate information may expose individuals to discrimination or harm.