IoT device compliance in Georgia
The market for the internet of things (IoT) is growing rapidly: connected sensors, smart household appliances, industrial controllers and wearable devices. Georgia has no separate statute devoted to IoT — and this must be said plainly. Another regulatory framework does exist: the Georgian Law on Electronic Communications, which applies to devices when a radio transmitter is built into them.
Among the definitions of Article 2 of the law is the user's terminal equipment: technical equipment intended for the receipt of an electronic communications service by a subscriber or end user, placed at a mobile or fixed address and not forming part of the operator's network. Most IoT devices — including those equipped with Wi-Fi, Bluetooth, cellular and LoRa modules — fit precisely into this concept. The first question of IoT compliance is therefore formulated as follows: does the device have a radio transmitter, and does it fall within the definition of terminal equipment?
The Certification Requirement and Its Link to Licensing
Article 59 of the law regulates the certification of radio installations and telecommunications terminal equipment. Certification is carried out in accordance with the regulation approved by the Commission. Under its second paragraph, certification is performed by examination centres and laboratories accredited, on the Commission's recommendation, with the Georgian National Agency for Standardization, Metrology and Certification. Where an accredited centre violates the relevant normative acts, its accreditation is revoked — the market itself is thus also controlled.
Under the third paragraph, certification is carried out in compliance with the relevant technical norms. In practice this means: the importer or seller of an IoT device must ensure that the device has a certificate issued by an accredited laboratory, linking its radio-frequency parameters to the technical norms.
The corresponding norm of the law — the provision applied as the first part of Article 64 — regulates the rule of conflict: where the electronic communications law establishes a procedure for the issuance of licences and the verification of licence conditions different from the general licensing law, the electronic communications law applies. This means that the special rules of the field are not subordinate to the general ones — and knowledge of precisely the special framework is decisive when entering the device market: qualification of the device, the certification route and the general requirements are assessed as one whole.
What is not regulated
What this framework does not cover must also be clearly delineated: it does not include other issues characteristic of IoT — specific requirements for the security of devices, the practice of collecting data from devices, or interoperability standards. These fields are the subject of other regulation and are assessed within the bounds of general regulation. A full compliance plan for an IoT device is therefore built on two levels: technical regulation through certification, and general legal requirements separately.
Practical steps before entering the market
The steps are as follows. First: checking the technical description of the device — whether it has a radio module, and which frequency range and power. Second: qualification against the definition of terminal equipment. Third: contacting an accredited examination centre and establishing the requirements of the certification regulation. Fourth: obtaining the certificate and keeping the documentation. Fifth: checking the general legal requirements — consumer rights, data protection and product safety.
When certification becomes a real problem
In practice the certification requirement becomes critical most often in two situations. The first — where the device is imported from abroad and its technical documentation is prepared for another market: the frequency ranges and power limits do not match the Georgian regulation, and without a certificate it turns out that the device cannot lawfully be sold. The second — where the product is manufactured locally and the developer uses a radio module as a ready component: the certificate of the ready component does not automatically cover the whole device, because the conditions of its use change in the final product. In both cases the way out is the same: early verification of the technical parameters and planning the certification before entering the market.
Frequently Asked Questions
Below we answer the questions most frequently asked about the compliance of connected devices.
Which devices fall under the requirement?
Those that fit the definition of terminal equipment and have a radio transmitter built into them.
Does every IoT device need certification?
No — the requirement is tied to the radio transmitter; general legal requirements remain separate.
Who controls the market?
The supervisory organ — certification is revocable, and the market itself is thus also controlled; control covers both the documents and the devices in circulation.
What happens when the device is modified?
Where the construction or the radio module changes, the validity of the certificate must be rechecked.
How We Help on Legal.ge
The Legal.ge team will help you assess IoT device compliance: with the qualification analysis, accompaniment of the certification process and control of the general requirements — so that the device enters the market lawfully.