Free preliminary assessment
FRENES
Home›Compliance›Territorial insights›Guadeloupe
DATA PROTECTION LAW · TERRITORY 971

GDPR in Guadeloupe:
understand the local context
to take effective action.

Public data, local insights and practical considerations for your organisation.

Documentary overview · Reference years provided for each source

01 / THE LOCAL CONTEXT

Organising data protection, even with a small team.

Where most employer establishments are small, data protection needs to fit into everyday work: clear responsibilities, controlled access and continuity planning.

14,582employer establishments
end of 2024 · Flores coverage
71.8 %of these establishments have
1–9 employees · end of 2024
235.9residents per km²
2023 population

Insee · Flores 2024 and 2023 census ↗ · Economic indicators describe the territory; they do not measure its GDPR compliance.

LOCAL CONTEXT · INSEE 2024

Activities that handle data every day

0 %50 %100 %
Agriculture2.8 %
Industry9.6 %
Construction10.2 %
Trade, transport and other services64.6 %
Administration, education, health and social work12.9 %

Distribution of employer establishments within the Flores scope. Figures may be rounded. Source: Insee ↗

02 / DOCUMENTED EVIDENCE

A concrete warning for public services

Following the November 2022 cyberattack, the Region included stronger protection of systems used by over 25,000 people across nearly 60 sites in its 2023 budget discussions. These figures describe the systems’ scope, not the number of victims or stolen records.

Guadeloupe Region · 2023 budget guidelines ↗

No recent territorial GDPR compliance rate was verified in the sources reviewed. An isolated incident cannot be used to rank territories by risk.

03 / FROM EVIDENCE TO ACTION

What this means for your organisation.

Suggested approaches to adapt after reviewing your activities, tools and obligations. These are not audit findings.

01

Small teams

Identify who manages customer and employee records, and arrange cover for absences.

02

Activities across the archipelago

Review remote access and file exchanges between sites and service providers.

03

Service continuity

Prepare an incident procedure and test data recovery with your IT provider.

04 / PUTTING THE FIGURES IN CONTEXT

Compare like with like.

3 TERRITORIES · ONE SOURCE

The landscape of employer establishments

08,00016,000
Guadeloupe14,582
Martinique13,217
French Guiana6,716

End of 2024 · Establishments employing staff during the year and active at the end of December.

Insee, Flores 2024 ↗ · Excludes defence and private household employers. This is not the total number of businesses.

FRANCE · NATIONAL CONTEXT

Personal data breach notifications

010,00020,000
20245,630
20256,167

2025: 6,167 notifications after excluding 11,635 notifications linked to two incidents at service providers.

CNIL, 2025 annual report, p. 52 ↗ · Notifications do not count unique attacks or individuals. No local distribution is extrapolated here.

05 / SOURCES & METHOD

Evidence you can check.

Observation dates differ from publication dates. This overview brings together the verified data below; it is neither an exhaustive incident inventory nor an official barometer.

View sources and interpretation limits
Who can help in the event of an incident?

The official CERT-FR directory lists CSIRT-ATLANTIC for Guadeloupe, Martinique and French Guiana. Technical assistance and assessment of legal obligations complement each other. A cyber incident is not automatically a personal data breach.

LEGALPROTECH

Your request

This online service is not yet open. The firm can provide you with information and support you directly.

Contact the firm