A foreign statute or the Georgian law: what governs data processing in Georgia
The California Consumer Privacy Act is a statute of a United States state and does not govern the processing of data in Georgia. For processing that touches Georgia — a Georgian service, a page aimed at the Georgian market, or the collection of consumer data through technical means located in Georgia — a single law applies: the Law of Georgia on Personal Data Protection, which is built on the European model and requires a prior basis for processing, including the data subject's consent. The Californian approach — an opt-out at the point of sale of data — is not sufficient under the Georgian law: here consent must be an active expression given for a specific purpose. On this page we explain what the Georgian law demands and how consumer rights look inside its frame. The Californian statute may serve only as a point of contrast for orientation, not as a compliance reference.