Data subject rights — the full catalogue Chapter three of the Law on Personal Data Protection grants the data subject eight rights, each answering a specific practical need: how to learn about process
GDPR/Privacy ComplianceThe legal framework of information governance in Georgia Information governance means a system of managing data within an organization that ensures lawful collection, accuracy, security, and the abili
Data ProcessingDocument destruction as a form of data processing Document destruction is often perceived as a mere technical operation — passing paper through a shredder or deleting a file. Under Georgian law this i
GDPR/Privacy CompliancePrivacy Policy Development is the first and most crucial step for any digital business to ensure compliance with Georgian legislation and gain user trust. A privacy policy is not just a formal documen
Regulatory DefenseDealing with the supervisory authority: what a business must know Engagement with the data protection supervisory authority often begins unexpectedly — with a subject's complaint or on the authority's
Sectoral ComplianceEmployee data: from bases to monitoring The workplace is one of the most data-intensive environments: an employer collects identity, pay, leave, evaluation and often behavioural data about candidates
Sectoral ComplianceDirect marketing and the data protection law Short messages, emails, calls and postal materials are all forms of direct marketing, and in Georgia they are governed by Article 12 of the Law on Personal
GDPR/Privacy ComplianceGDPR (General Data Protection Regulation) Compliance is critical for companies operating in Georgia that target the EU market or process the personal data of EU residents. Although Georgia is not yet
GDPR/Privacy ComplianceCompliance with Georgian Data Protection Legislation is mandatory for all organizations processing information about individuals within the territory of Georgia. From March 1, 2024, the new Law of Geo
GDPR/Privacy ComplianceHR Data Compliance is one of the most sensitive and risky areas for employers. In employment relationships, employers process large volumes of information about employees: ID copies, bank accounts, he
GDPR/Privacy ComplianceMarketing Data Compliance is an essential requirement for any company engaging in direct marketing in Georgia. SMS advertising, Email Marketing, and telemarketing calls are regulated by the Law of Geo
GDPR/Privacy ComplianceAbout this service A personal-data protection audit is the work that puts an organisation on its feet before an inspection arrives. In Georgia, supervision in the field of data protection is exercised
Data Subject RightsWhat the right to data portability is The right to data portability lets the subject take their own data along when moving from one service to another. Under Article 18 of the Law on Personal Data Pro
Data Subject RightsThe right to request information: the Georgian legal frame The institution of a data subject's information request is often labelled with a foreign abbreviation, but in Georgia the right is defined by
Data Subject RightsThe right to erasure in Georgian law The right to demand the deletion of data is colloquially known in foreign terminology as the right to be forgotten. In Georgia the institution is defined by the La
Data ProcessingWho is the processor Under the definition of Article 3 of the Law on Personal Data Protection, the processor is a natural person, legal person or public institution that processes data for the control
Data Breach ManagementWhy a data breach response plan is necessary A data breach response plan is a document prepared in advance that defines who, when, within which deadlines and with which content responds to an incident
DPO ServicesData Protection Officer (DPO) Advisory and Support Services The new Law of Georgia on Personal Data Protection significantly increases the responsibilities of organizations, making the appointment of
