Sends automated texts, in Guyana

Data Protection Act 2023, ss. 11-18 and 20-22 (rights of data subjects) · Read the law's page

• Once the Data Protection Act 2023 is commenced, tell a data subject on request whether you process their personal data, give them the description section 11 lists and a copy, and provide it in electronic form where the request is electronic.
• Rectify inaccurate personal data and erase personal data without undue delay where a section 13(2) ground applies, such as withdrawal of consent, and tell each recipient of a rectification, erasure or restriction unless that is impossible or involves disproportionate effort.
• Restrict processing on a section 14 ground, give a data subject the personal data they provided in a structured, commonly used and machine-readable format, and transmit it to another controller where processing is by automated means on consent or contract.
• Stop processing personal data for direct marketing when the data subject objects, and cease or do not begin processing that the data subject requires in writing you to stop because it is causing or likely to cause substantial, unwarranted damage or distress.
• Give a data subject at collection, or within one month where the data came from another source, the information sections 20 and 21 list, including your identity, the purposes and legal basis, the recipients, the retention period, their rights and the right to complain to the Commissioner.
• Answer a data subject's rights request without undue delay and within one month of receipt, extend that period by two months only for complex or numerous requests and tell the data subject of the extension and the reasons within the first month, and provide the response free of charge.