---
title: "Civil Rights"
url: "https://legal.ge/en/service/international-law-en/civil-rights-en"
field: "International Law"
description: "Civil rights and personal data protection: your rights, statutory deadlines and the rules of video surveillance. Legal.ge."
reviewed: "2026-02-15"
updated: "2026-10-24"
publisher: "legal.ge"
---

# Civil Rights

> Source: legal.ge, https://legal.ge/en/service/international-law-en/civil-rights-en

## Personal Data Protection as a Civil Right

Among the central guarantees of modern civil rights is the protection of personal data. Article 4 of the Law on Personal Data Protection establishes the principles of processing: data must be processed lawfully, fairly, transparently for the subject and without violating their dignity. Data may be collected only for specific, clearly defined and legitimate purposes and processed only to the extent necessary. They must be accurate and, where necessary, kept up to date; inaccurate data must be corrected, erased or destroyed without unjustified delay. After the purpose is achieved, data must be erased, destroyed or stored in depersonalized form unless storage is determined by law. Appropriate technical and organizational measures must protect the data from unauthorized or unlawful processing, accidental loss, destruction or damage, and the controller must be able to demonstrate compliance with these principles.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/international-law-en/civil-rights-en

### On what principles must data be processed?

Lawfulness, fairness, transparency, limitation of purpose and volume, accuracy and a legitimate storage period.

### Where does processing get its ground?

For example, from consent, a contract, the law, vital or significant public interests, a legitimate interest, or the need to examine an application.

### Where is video surveillance prohibited?

In changing rooms, in places designated for hygiene, and in spaces where you have a reasonable expectation of privacy.

### What happens once the purpose is achieved?

The data must be erased, destroyed or stored in depersonalized form, unless storage is determined by law.