Tamper-proof technology will be implemented to keep public records safe – VP

…says Govt committed to digital protection from data breaches

Vice President (VP) Bharrat Jagdeo has made it clear that the People’s Progressive Party/Civic (PPP/C) Government is committed to protecting public records against data breaches, ensuring that records cannot be tampered with and manipulated to the disadvantage of anyone.
Jagdeo gave this assurance during his recent press conference, where he spoke of the possible introduction of block chain technology to protect records at agencies such as the Guyana Geology and Mines Commission (GGMC) or the Guyana Land Registry.
“The introduction of block chain technology [can aid] in fighting corruption and promoting greater accountability. Now, the block chain technology is what powers digital currency. So, it’s almost tamper proof. You can’t go back and change codes from the past. So, we have to use this technology in some places where we’ve had complaints about tampering with public records,” he said.
“The land registry, for example. GGMC, where often we hear small miners come and complain that the moment they have a piece of land and the moment they discover gold on the land, then some guy, some bigger miner, comes along and they say, but my application was in before this person who made the discovery. And you know the policy at GGMC is first come, first serve. It’s done on that basis, the allocation of the land.”
The VP noted that with this in mind, if someone was to manipulate the system and introduce a prior application for the same land the gold was found on, a dispute would arise and the person finding the gold could have their land taken from them. He therefore cited the importance of beefing up digital protection when it comes to these and other records.
“So, if you discover a prior application, then most likely the other person will get the land. And they often tamper with the records. Go and stick in an earlier application from someone that [is wealthy]. And this is a frequent complaint I get. And there’s no way that the policy makers can verify it.”
“But if we have a tamper proof technology, and the records are all kept in this form, nobody can go back and change records to suit others or disadvantage small people. And at the land registry, this is something we hear often. We are fully committed to introducing [this] in many of the public sector agencies that have to do with records and public service areas.”
Back in August 2023, the PPP/C Government had passed the Data Protection (Amendment) Bill 2023 in the National Assembly, which allows for the privacy of persons when their personal data is being used or handled.
The Data Protection Bill was created to regulate the collection, keeping, processing, use and dissemination of personal data. It sets a statutory framework, moving away from the current construct of the country’s legislation, which does not safeguard rights to data protection.
Personal data has been defined as any information relating to an identified or identifiable person, pertaining to private and public life as well as professional activities. The Bill prescribed that a body be established, recognised as the Data Protection Office, which shall be responsible for the administration and implementation of the Act. The President was also empowered to appoint a Data Protection Commissioner.
The bill was drafted in keeping with the Universal Declaration of Human Rights and the International Covenant on Civil and Political Rights. Lawmakers took guidance from the United Kingdom (UK), Jamaica, Barbados, Mauritius and Kenya.
There are penalties for data controllers, which are persons who determine the manner and purpose of which personal data is processed. It is a criminal offence for such officers to operate without being registered or without nominating a representative, carrying a fine of $10 million- or two months’ imprisonment.
Like data controllers, data processors must also be registered and when necessary, appoint a representative established in Guyana. A data processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
Both are required to maintain a record of processing activities, cooperate with the commissioner, implement appropriate technical measures to ensure certain security and notify the commissioner when there is a breach of personal data.