What cross-border data transfer means under Georgian law
Cross-border data transfer means the transfer of data to another state or to an international organisation, and this process is governed by Articles 37 and 38 of the Georgian Law on Personal Data Protection. This page discusses the complete algorithm of the lawfulness of a transfer: from the general requirements, through the permitted grounds and the restrictions on onward transfers, to the adequacy assessment and the sanctions provided for violations.
The initial rule is simple but often omitted: before a transfer, the processing itself must satisfy the general requirements of the law, including the existence of a ground defined in Article 5. A transfer is not an isolated technical act — it is a continuation of processing, which is precisely why it requires the same legal foundation as any other processing.