---
title: "GDPR Compliance"
url: "https://legal.ge/en/service/technology-and-digital-law-en/gdpr-compliance-en"
field: "Technology & Digital Law"
description: "GDPR-style compliance under Georgian law: principles, lawful bases, data-subject rights within 10 working days, complaints. Legal.ge."
reviewed: "2026-03-25"
updated: "2026-10-20"
publisher: "legal.ge"
---

# GDPR Compliance

> Source: legal.ge, https://legal.ge/en/service/technology-and-digital-law-en/gdpr-compliance-en

## European Standard and Georgian Law: What Compliance Actually Targets

The European Union's General Data Protection Regulation does not apply directly in Georgia — the operative law for the Georgian market is the Georgian Law on Personal Data Protection. At the same time, many Georgian companies serve European consumers and transfer data to European partners, so a compliance programme must answer to both regimes. The practical route is this: internal documents and processes are built on the specific requirements of the Georgian law, while the equivalent European level of protection is secured where both regimes demand the same thing — lawful grounds, transparency, data-subject rights and security measures.

Notably, the Georgian law's core blocks mirror the European regulation's architecture: processing principles, lawful bases, the rights of data subjects to information, rectification and erasure, and the right to complain. The differences lie in the details — deadlines, the supervisory authority and the sanctions regime. That is why a compliance audit runs in two layers: first a check of the obligations defined by the Georgian law, then a clarification of the grounds for transferring data to European partners.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/technology-and-digital-law-en/gdpr-compliance-en

### Which law applies in Georgia?

The Georgian Law on Personal Data Protection; the EU regulation matters when you serve European users.

### What is the response deadline?

10 working days, extendable once by up to 10 working days with immediate notice.

### Processing without consent?

Pick a lawful ground — contract, legal obligation, legitimate interest, public interest — and document it.

### Where can consumers complain?

To the State Audit Service, the courts or a superior administrative organ; blocking may be requested pending review.