---
title: "Computer Hacking Defense"
url: "https://legal.ge/en/service/crim-criminal-law-en/computer-hacking-defense-en"
field: "Criminal Law"
description: "Article 284 CC Georgia: unauthorized access to a computer system — fine, corrective labor or prison up to 6 years. Defense lawyer. Legal.ge."
reviewed: "2026-07-09"
updated: "2026-10-14"
publisher: "legal.ge"
---

# Computer Hacking Defense

> Source: legal.ge, https://legal.ge/en/service/crim-criminal-law-en/computer-hacking-defense-en

## What Article 284 of the Criminal Code Punishes

Article 284 of the Criminal Code of Georgia establishes criminal liability for unauthorized access to a computer system. In everyday speech this conduct is often called hacking, but the legal assessment does not depend on labels — it depends on the statutory definitions and on the concrete facts of the case. If a case has been initiated against you under this article, you need to understand exactly what the law requires, which circumstances make liability more severe, and where realistic defense arguments open up. This page explains the content of the article, every sanction it provides, and the questions on which a criminal defense lawyer's involvement is decisive.

## Elements of the Offense Under the Law

Under the first part of the article, unauthorized access to a computer system is a crime. To assess the conduct correctly, the law explains several key concepts:

-   a computer system is any device or mechanism, or a group of interconnected devices or mechanisms, that automatically processes data by means of a program; the law expressly states that this concept covers a personal computer, any device with a microprocessor, and a mobile telephone;
-   computer data is any information represented in any form convenient for processing in a computer system, including a program that ensures the functioning of the computer system;
-   unauthorized means unlawful, and also covers the situation where the holder of the right has not transferred the right to the person committing the act, either directly or indirectly.

These definitions show that the decisive question in a case is often the existence of a right: if the person had been granted the right of access by the holder of the system, directly or indirectly, the element of lack of authorization is absent. That is why a defense lawyer begins by establishing who granted or denied that right, when, and in what form, and then supports these facts with evidence.

## Sanctions Under the First Part

For unauthorized access to a computer system, the first part of the article provides a fine, or corrective labor for a term of up to two years, or imprisonment for the same term — that is, up to two years. Cases under this part typically involve conduct committed without aggravating features. The specific penalty ultimately depends on how well the prosecution proves its case and how persuasively the defense position is presented.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/crim-criminal-law-en/computer-hacking-defense-en

### What penalty is provided by the first part of the article?

For unauthorized access to a computer system the law provides a fine, or corrective labor for a term of up to two years, or imprisonment for the same term — up to two years. The court selects the specific measure according to the circumstances of the case.

### When is damage considered significant?

Under this chapter, significant damage means damage exceeding 2000 GEL, except for the case provided for by another norm of the Code. The prosecution must establish and document the amount of the damage.

### What penalty applies to acts committed against a critical information system subject?

In such a case the law provides imprisonment for a term of three to six years. The status of a critical information system subject is defined by the Law on Information Security and must be established separately in the case.

### Can a legal entity be held liable for this conduct?

Yes. Under the note, a legal entity is punished for this conduct by a fine, by deprivation of the right to carry out activity, or by liquidation and a fine.

### Why is a lawyer's involvement decisive in such cases?

The outcome often depends on whether lack of authorization, the concept of a computer system, the amount of damage, and the aggravating features are established. A lawyer verifies each of these elements separately and builds the defense position on the evidence.