DATA PROTECTION LAW · TERRITORY 973

GDPR in French Guiana:
understand the local context
to take effective action.

Public data, local insights and practical considerations for your organisation.

Documentary overview · Reference years provided for each source

01 / THE LOCAL CONTEXT

Maintain data access and continuity across a large territory.

Low population density and dispersed activities call for a review of remote working, file exchanges and contingency procedures. This context alone does not measure cyber risk.

6,716employer establishments
end of 2024 · Flores coverage

68.2 %of these establishments have
1–9 employees · end of 2024

3.5residents per km²
2023 population

Insee · Flores 2024 and 2023 census ↗ · Economic indicators describe the territory; they do not measure its GDPR compliance.

LOCAL CONTEXT · INSEE 2024

Activities that handle data every day

0 %50 %100 %

Agriculture2.2 %

Industry9.2 %

Construction14.1 %

Trade, transport and other services60.7 %

Administration, education, health and social work13.7 %

Distribution of employer establishments within the Flores scope. Figures may be rounded. Source: Insee ↗

02 / DOCUMENTED EVIDENCE

Digital continuity put to the test

The University of French Guiana’s activity report describes a ransomware attack on 30 April 2024, which shut down digital services and resulted in the loss of available backups. It describes a gradual restoration of services. This documents one case, not the frequency of attacks across the territory.

University of French Guiana · 2024 activity report, DNUM section ↗

No recent territorial GDPR compliance rate was verified in the sources reviewed. An isolated incident cannot be used to rank territories by risk.

03 / FROM EVIDENCE TO ACTION

What this means for your organisation.

Suggested approaches to adapt after reviewing your activities, tools and obligations. These are not audit findings.

Remote sites and teams

Define authorised channels for transmitting files and limit local copies.

Workers’ data

For construction sites and subcontracting activities, check document recipients and retention arrangements.

Recovery after an incident

Arrange isolated backups, test recovery and organise emergency contacts.

04 / PUTTING THE FIGURES IN CONTEXT

Compare like with like.

3 TERRITORIES · ONE SOURCE

The landscape of employer establishments

08,00016,000

Guadeloupe14,582

Martinique13,217

French Guiana6,716

End of 2024 · Establishments employing staff during the year and active at the end of December.

Insee, Flores 2024 ↗ · Excludes defence and private household employers. This is not the total number of businesses.

FRANCE · NATIONAL CONTEXT

Personal data breach notifications

010,00020,000

20245,630

20256,167

2025: 6,167 notifications after excluding 11,635 notifications linked to two incidents at service providers.

CNIL, 2025 annual report, p. 52 ↗ · Notifications do not count unique attacks or individuals. No local distribution is extrapolated here.

05 / SOURCES & METHOD

Evidence you can check.

Observation dates differ from publication dates. This overview brings together the verified data below; it is neither an exhaustive incident inventory nor an official barometer.

View sources and interpretation limits

Insee territorial comparison tool : establishments and sectors, Flores 2024; population and density, 2023 census. Comparison published on 27 August 2026.
University of French Guiana · 2024 activity report, DNUM section : the local evidence presented above.
CNIL, 2025 annual report, published in May 2026: 5,630 notifications in 2024; 17,802 in 2025 before adjustment, 6,167 after the exclusion explained by the CNIL.
CNIL, limits of geographical distributions : the controller’s location does not necessarily match the location of the incident. No local risk ranking is inferred.

Who can help in the event of an incident?

The official CERT-FR directory lists CSIRT-ATLANTIC for Guadeloupe, Martinique and French Guiana. Technical assistance and assessment of legal obligations complement each other. A cyber incident is not automatically a personal data breach.

GDPR in French Guiana:understand the local contextto take effective action.

Maintain data access and continuity across a large territory.

Activities that handle data every day

Digital continuity put to the test

What this means for your organisation.

Remote sites and teams

Workers’ data

Recovery after an incident

Compare like with like.

The landscape of employer establishments

Personal data breach notifications

Evidence you can check.

GDPR in French Guiana:
understand the local context
to take effective action.