---
title: "Privacy Compliance Audits"
url: "https://legal.ge/en/service/technology-and-digital-law-en/privacy-compliance-audits-en"
field: "Technology & Digital Law"
description: "Data protection audit in Georgia: what the State Audit Service inspects, deadlines and obstruction fines up to 6000 GEL. Legal.ge."
reviewed: "2026-02-15"
updated: "2026-11-07"
publisher: "legal.ge"
---

# Privacy Compliance Audits

> Source: legal.ge, https://legal.ge/en/service/technology-and-digital-law-en/privacy-compliance-audits-en

## About this service

A personal-data protection audit is the work that puts an organisation on its feet before an inspection arrives. In Georgia, supervision in the field of data protection is exercised by the State Audit Service — the supervisory authority designated by the current legislation, which may inspect you either on its own initiative or on the basis of an interested person's application, with the decision on conducting an inspection taken by the General Auditor. An inspection is no formality: its results may include an order to remedy violations, cessation of processing, blocking, deletion, destruction or depersonalisation of data, and administrative liability. This service is built on exactly that reality: we prepare your organisation by checking the same points the State Audit Service examines.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/technology-and-digital-law-en/privacy-compliance-audits-en

### Who inspects personal data protection in Georgia?

Supervision in the field of data protection is exercised by the State Audit Service, and the decision to conduct an inspection is taken by the General Auditor. An inspection is possible both on the Service's own initiative and on the basis of an interested person's application.

### How much time do you have to provide requested material?

Records-related information — immediately upon request, but no later than 3 working days. Other material — immediately, but no later than 10 working days where collection occurs in another unit or the volume is significant; on a reasoned request this may be extended by a further 10 working days.

### What can happen when a violation is found?

The State Audit Service may demand remediation of deficiencies, temporary or permanent cessation of processing, blocking, deletion, destruction or depersonalisation of data, cessation of transfers, issue written advice or impose administrative liability. The decision is binding and appealable only in court.

### What fines exist for obstruction?

Violating the information-submission procedure or providing false information entails a warning or a fine — up to 1 000 lari for smaller entities and up to 2 000 lari where turnover exceeds 500 000 lari; on repetition these rise to 3 000 and 5 000 lari. Obstruction of an inspection is fined from 2 000 to 4 000 lari, and on repetition from 4 000 to 6 000 lari.