---
title: "International Data Transfers"
url: "https://legal.ge/en/service/technology-and-digital-law-en/international-data-transfers-en"
field: "Technology & Digital Law"
description: "International data transfers: extraterritorial scope, the special representative and transfer rules under Georgian law. Legal.ge."
reviewed: "2026-02-15"
updated: "2026-10-22"
publisher: "legal.ge"
---

# International Data Transfers

> Source: legal.ge, https://legal.ge/en/service/technology-and-digital-law-en/international-data-transfers-en

## The legal framework of international data transfers

International data transfer unites two different but closely connected questions: first, when the transfer of data to another state or international organisation is permitted; second, how the Georgian Law on Personal Data Protection extends to controllers registered abroad. This page is oriented precisely towards the second, international dimension: for foreign companies that process data in Georgia and for Georgian organisations cooperating with them.

Under the first paragraph of Article 2 of the law, its scope covers the processing of data on the territory of Georgia by automatic and semi-automatic means, the non-automatic processing of data that form part of a filing system, and also the processing by means of technical facilities located in Georgia by a controller registered outside Georgia. The only exception is where the technical facilities are used solely for the transit of data. This means that foreign services using servers or other technical facilities located in Georgia fall under the Georgian law.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/technology-and-digital-law-en/international-data-transfers-en

### Does the Georgian law extend to foreign companies?

Yes, where they process data using technical facilities located in Georgia. The only exception is technical facilities used solely for the transit of data.

### When is a special representative required?

A person registered abroad processing data through technical facilities in Georgia must appoint or designate a special representative before processing. The right to process arises only after its registration. Persons based in EU member states and in states with recognised adequate protection are exempt.

### How is the lawfulness of a transfer established?

Under Article 37: by the existence of appropriate guarantees in the recipient country or by exceptional grounds — treaty, contractual guarantees with permission, consent, vital or public interest.

### What must be recorded about transfers?

Under Article 28: the parties' identity, purposes, categories, recipients, information on transfers and guarantees, storage periods, security measures and incidents. Upon request it is provided to the State Audit Office within 3 working days.