Duty LXD-1048
Processes personal data, in Guam
Guam Uniform Civil Remedies for Unauthorized Disclosure of Intimate Images Act of 2019in force3 lines
7 GCA §§ 53101-53108 · Read the law's page
- Do not intentionally disclose, or threaten to disclose, a private intimate image of an identifiable person without that person's consent, when you know or recklessly disregard that the image is private, the person did not consent, or the person is identifiable.
- Expect civil liability, not a criminal charge, under this Act: a prevailing plaintiff can recover actual and emotional-distress damages, or statutory damages up to $10,000 per defendant, plus any profit you made from the disclosure, punitive damages, and attorney's fees.
- Note that this Act's intimate-image definition covers a photograph, film, video recording, or similar medium; it does not by its own terms address a wholly AI-generated or synthetic depiction that shows no genuine recording of the person.
Notification of Breaches of Personal Informationin force3 lines
9 GCA §§ 48.10-48.80 · Read the law's page
- If you own or license computerized data that includes personal information, disclose a breach of the security of the system, without unreasonable delay following discovery or notification of the breach, to any Guam resident whose unencrypted and unredacted personal information was or is reasonably believed to have been accessed and acquired by an unauthorized person, where the breach causes, or you reasonably believe it has caused or will cause, identity theft or other fraud to any resident of Guam.
- If you hold a Guam resident's computerized personal information for another owner or licensee rather than for yourself, notify that owner or licensee as soon as practicable after discovering a breach.
- Do not treat this chapter as reaching biometric data: its personal-information definition covers only a Social Security number, a driver's license or Guam ID number, or a financial account or card number, none of them biometric.