What you will learn
- Why AI and personal data are tied together
- Which Guyanese laws are relevant, and their reported status
- What is happening in the region on AI rules
- Everyday privacy habits
This lesson is a plain-language overview for general education. It is not legal advice. Laws and their status change. For your own situation, read the official text and speak to an attorney-at-law.
Why data and AI go together
AI systems learn from data, and many of them keep learning from what users type and upload. Personal data, such as your name, ID number, phone, address, photo, health details or finances, is valuable. In the right hands it makes services faster. In the wrong hands it enables fraud, identity theft and harassment.
So two questions matter every time you use an AI tool or a digital service:
- What data am I giving?
- Who will hold it, and what rules protect me?
Is there an AI law in Guyana?
From our research up to 24 Oct 2026, we did not find a Guyanese law written specifically to regulate AI. Instead, several general laws apply to how AI is used, especially laws about personal data and computer crime. Regional bodies are working on AI policy guidance (see below).
The Data Protection Act 2023
- The Data Protection Act is Act No. 18 of 2023. The Parliament of Guyana lists it as passed on 9 August 2023 and gazetted on 16 August 2023 (Parliament of Guyana).
- It sets up a Data Protection Commissioner. The Prime Minister told the National Assembly that a Commissioner was appointed on 2 January 2026, and Demerara Waves reported that the person appointed was Mr. Aneal Giddings (Demerara Waves, 7 Feb 2026).
- Status: On 31 March 2026, Demerara Waves reported that the Act had not yet come into force because a commencement order had not been issued (Demerara Waves, 31 Mar 2026). In a letter published on 15 May 2026, the Commissioner wrote that the Act is the law of the land and that his office was actively working to formally establish the Data Protection Office (Kaieteur News, 15 May 2026).
What we can say safely: the Act was passed in 2023, and it was not reported as in force as of May 2026. A Commissioner has been appointed. Check the Official Gazette or the Commissioner's office for the latest position.
The Digital Identity Card Act 2023
- The Commissioner's letter describes the Digital Identity Card Act as Act No. 19 of 2023, passed together with the Data Protection Act as companion laws, and says the Digital Identity Card Registry is administered by the Data Protection Commissioner (Kaieteur News, 15 May 2026).
- It came into operation on 31 March 2026 under a commencement order issued by the Prime Minister (Demerara Waves, 31 Mar 2026).
- By 12 May 2026, more than 21,000 people had enrolled for the e-ID card, according to the Commissioner (DPI, 12 May 2026). The same report lists proof of citizenship, a picture ID and proof of address among the requirements, and says the e-ID is not meant to replace passports, driver's licences or the GECOM ID card at this stage.
The Cybercrime Act 2018
The Cybercrime Act covers crimes committed using computers, including the harassment and reputation-damage offences in section 19 summarised by the Ministry of Legal Affairs (Ministry of Legal Affairs, 25 Sep 2024). A review of the Act was announced in 2024, and updating it was listed among government digital priorities in January 2026 (DPI, 29 Jan 2026). See Lesson 7 for how this relates to scams and deepfakes.
What the region is doing
- The Caribbean Telecommunications Union (CTU) launched a Caribbean AI Task Force on 18 July 2025. Its stated aims include harmonising AI policies and regulations across the Caribbean, building AI skills, and promoting ethical and responsible AI. It is expected to deliver policy recommendations and develop model legislation (CTU, 18 Jul 2025).
- The 1st Caribbean AI Forum was held on 23 and 24 July 2026 in Trinidad and Tobago, where the Task Force report was launched (CTU, 23 Jul 2026).
Regional recommendations do not become Guyanese law unless Guyana passes its own laws.
Your rights in plain words
Data protection laws of this kind generally aim to give people rights such as knowing what data is held about them, asking for corrections, and having their data kept secure and used only for proper purposes. Check the Act itself and official guidance for exactly which rights apply in Guyana, and when. Do not rely on a summary, including this one.
Everyday privacy habits
At home
- Read what an app wants before you tap "Allow". Does a torch app really need your contacts?
- Do not upload photos of your ID card, passport or bank card to AI tools or random websites.
- Use AI tools' privacy settings. Some let you turn off chat history or stop your chats being used for training.
- Be careful with children's photos and names online.
At work
- Collect only the customer data you actually need.
- Keep it safe: passwords, locked devices, limited access.
- Never paste customer or staff personal data into public AI tools.
- If you use a software provider, ask where your data is stored and who can see it.
- Have a plan for what to do if data is lost or leaked.
Example: the minibus WhatsApp group
A minibus driver on the Route 42 line keeps a WhatsApp group of regular passengers to tell them when he is running. He wants AI to help him write a polite message about a fare change. He types only the message idea. He does not paste the group's member list with names and numbers. Good habit. (Made-up example.)
Key words
- Personal data: any information that identifies a living person.
- Commencement order: an official order that brings a law, or part of it, into force.
- Data Protection Commissioner: the official created by the Data Protection Act to oversee how personal data is handled.
- Model legislation: a sample law that countries can adapt.