Legal.geLegal.geLegal.ge
SpecialistsCompaniesLibraryBlog
More
AboutPricingContact
LegalTools
Loading accountLog in
AboutSpecialistsCompaniesLibraryBlogPricingContact
LegalTools
Loading accountLog in
Legal.ge

Georgia’s legal platform.

Download on the App StoreLegal.ge for iPhone

Quick Links

  • About Us
  • Specialists
  • Open tasks
  • Services
  • Laws & Codes
  • Firms
  • Organisations
  • Events
  • Blog
  • Contact

Legal

  • Legal library
  • Privacy Policy
  • Terms & Conditions
  • Cookie Policy

Contact

contact@legal.ge+995 551 911 961Need a lawyer? Find a specialist

Tbilisi, Georgia

© 2026 Legal.ge. All rights reserved.

Made with in Georgia

  1. Services
  2. Technology & Digital Law
  3. Data Protection & Privacy
  4. Sectoral Compliance
  5. Marketing Data Compliance

Services

0 services available

Loading...

Sectoral Compliance

Marketing Data Compliance

What is needed for a marketing message?

The data subject's consent — without exception. For data other than name, surname, address, telephone and e-mail, written consent is required.

Within what period is processing ceased upon withdrawal?

Processing for direct marketing ceases no later than 7 working days from the request. Under the general withdrawal rule, processing ceases or the data are deleted within 10 working days unless another ground exists.

Who proves the existence of consent?

The organisation. The burden of proving consent, the simplicity and accessibility of the refusal mechanism rests on it. For this the time and fact of consent are kept for the campaign period and 1 year after cessation.

What fine is provided?

Under Article 71: a warning or 2 000 lari at turnover up to 500 000 lari and a warning or 3 000 lari above; with aggravating circumstances — 4 000 and 6 000 lari.

5 min·8 Feb 2026

Direct marketing and the data protection law

Short messages, emails, calls and postal materials are all forms of direct marketing, and in Georgia they are governed by Article 12 of the Law on Personal Data Protection. The relevant subparagraph of Article 3 of the law defines direct marketing as the direct and immediate provision of information to the data subject by telephone, mail, e-mail or other electronic means for the purpose of forming, maintaining, realising or supporting interest in a natural or legal person, goods, an idea, a service or an initiative.

Managing this field looks simple, but it is precisely marketing campaigns where data protection rules are violated most often. Discussed below are the consent rule, the withdrawal mechanism, the burden of proof and the sanctions.

Updated: 18 Oct 2026

Legal basis:

  • პერსონალურ მონაცემთა დაცვის შესახებ