Hosting Jurisdictions and Data Placement in Georgia

Hosting Jurisdictions and Data Placement

What is a special representative?

A contact of a foreign-registered controller appointed in Georgia; without its registration, processing through Georgian technical means does not begin.

How is transfer to a state without guarantees done?

By the subject’s informed written consent, alongside other statutory grounds; the route of contractual guarantees requires a supervisory permit.

Why is the list dynamic?

Because it is revised at least once every 3 years, and a state declared inadequate is removed from the list without retroactive force.

Who is the exception?

Persons based in European Union member states and in states recognised by the European Union as having adequate protection.

4 min·22 Sep 2026

The Legal Dimension of Hosting Architecture

The choice of hosting for a gaming platform is not a technical decision but a legal precondition: where the server is located and who is registered as the controller directly determines what the Law on Personal Data Protection demands. Georgian law builds two axes here: the Georgian connection of a controller registered abroad, and the procedure for transferring data abroad. The legal assessment of hosting jurisdictions is built precisely on these two axes.

In practical terms this means: before a jurisdiction is chosen, three questions must conditionally be asked — where is the controller registered, does it use technical means located in Georgia, and will data be transferred to another state. Each answer carries its own normative consequence.