Four Months Late: The Digital ID Rollout and the Governance of Afterthought

THE 592 GUARDIAN ◊ EDITORIAL

Four Late: The Digital ID Rollout and the Governance of Afterthought

JULY 2026

On March 31, 2026, Prime Minister Brigadier (Ret’d) Mark Phillips signed the Commencement Order that brought the Digital Identity Card Act 19 of 2023 into full force. The Act itself had been passed by Parliament in August 2023 — two and a half years earlier. On July 18, 2026, nearly four months after commencement, the Office of the Prime Minister’s Digital Identity Card Registry found it necessary to issue formal guidance to banks, employers, and public bodies explaining which number on the card they are legally required to use to identify a citizen.

That gap — two and a half years from passage to commencement, and a further four months from commencement to basic operational guidance — is not a footnote. It is the story.

What Should Have Been Settled Before Day One

The guidance itself is not complicated. The GUIN, for citizens, and the RIDN, for eligible non-citizen residents, are the permanent identifiers assigned for life.        The Document Number is a travel reference that changes with every renewal. The Card Access Number is a chip-level technical value that should never be used to identify anyone. This is not a discovery. It is card design 101, the kind of distinction that any institution issuing a national identity credential must resolve, communicate, and train its counterpart institutions on before a single card reaches a citizen’s hand — not four months after the fact, and not in response to confusion already circulating in bank branches and payroll departments across the country.

The sequencing here matters. Section 6(1) of the Act makes the card the lawful standard of identification for any business conducted with a public body and or private entity in Guyana That provision took effect on March 31. Every bank, insurance company, employer, and government office that has processed a Digital Identity Card since that date has been operating, potentially, on inconsistent internal guidance — some recording the Document Number as a permanent identifier, a number the registry itself confirms changes with every reissue. The Registry’s own rationale for the July guidance is an admission of exactly this exposure: institutions relying on the wrong number, it says, risk “losing continuity of records or misidentifying cardholders over time.”

A single-page reference card distributed to every bank compliance officer and HR department on commencement day would have cost nothing and prevented four months of exactly the confusion the Registry is now moving to correct.

A Familiar Pattern, Not an Isolated Lapse

  The Digital Identity Card project adds a further complication that deserves its own scrutiny: the 2023 Data Protection Act, which legal commentary has already flagged as intrinsically linked to DICA’s own legality, remains uncommenced. A national identity system built to eventually govern financial, medical, and biometric data has been placed into full legal force for identification purposes while the statute meant to govern the protection of that same data sits idle.

None of this is to say the Digital Identity Card project lacks merit. A single, life-long identifier that survives card renewal is a genuine improvement over the fragmented identification landscape it replaces. The concept is sound. What is absent is foresight in the execution — the discipline of anticipating, before commencement, what the regulated institutions of this country would need to know on day one, rather than assembling that guidance reactively once gaps in practice have already taken root.

The Question the Registry’s Notice Does Not Answer

The Registry’s guidance does not say how many institutions have, over the past four months, recorded the wrong number as a permanent identifier, nor what remediation — if any — is planned for records already corrupted by that error. It does not address whether the Data Protection Act’s continued dormancy affects the legal footing of the data now being collected under DICA. And it does not explain why a Commencement Order signed in March could not have been paired, on the same day, with the identical guidance now issued in July.

Guyana’s citizens and the private institutions that serve them deserve a government that anticipates the operational consequences of its own legislation before those consequences become public confusion requiring public correction

“We will cross that bridge when we get there” is not a policy posture befitting a national identity system that Section 6(1) now makes mandatory for daily life. It is an admission that the bridge was never built in the first place.

— The Board