---
title: "CCPA Compliance"
url: "https://legal.ge/en/service/technology-and-digital-law-en/ccpa-compliance-en"
field: "Technology & Digital Law"
description: "CCPA does not apply in Georgia: data protection under the Georgian law — bases, consumer rights and complaints. Legal.ge."
reviewed: "2026-02-15"
updated: "2026-10-19"
publisher: "legal.ge"
---

# CCPA Compliance

> Source: legal.ge, https://legal.ge/en/service/technology-and-digital-law-en/ccpa-compliance-en

## A foreign statute or the Georgian law: what governs data processing in Georgia

The California Consumer Privacy Act is a statute of a United States state and does not govern the processing of data in Georgia. For processing that touches Georgia — a Georgian service, a page aimed at the Georgian market, or the collection of consumer data through technical means located in Georgia — a single law applies: the Law of Georgia on Personal Data Protection, which is built on the European model and requires a prior basis for processing, including the data subject's consent. The Californian approach — an opt-out at the point of sale of data — is not sufficient under the Georgian law: here consent must be an active expression given for a specific purpose. On this page we explain what the Georgian law demands and how consumer rights look inside its frame. The Californian statute may serve only as a point of contrast for orientation, not as a compliance reference.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/technology-and-digital-law-en/ccpa-compliance-en

### Does the California statute apply to data processing in Georgia?

No. It is a statute of a United States state and does not govern processing connected with Georgia. Such processing falls under the Law of Georgia on Personal Data Protection.

### How quickly must a request for information be answered?

The information must be supplied no later than 10 working days from the request. In special cases, with proper justification, the term may be extended by no more than a further 10 working days, and the requester must be notified of this immediately.

### Can a request for erasure be refused?

Yes, in the cases set by law: where another basis for processing exists, the data are needed for a legal claim or pleadings, freedom of expression so requires, or the processing serves archiving, scientific, historical or statistical purposes. On refusal the subject must be told the grounds and how to appeal.

### Where can a complaint be filed?

On a violation, the data subject may apply to the State Audit Service, the court or a superior administrative organ, and the State Audit Service's decision may be appealed in court.