The right to request information: the Georgian legal frame
The institution of a data subject's information request is often labelled with a foreign abbreviation, but in Georgia the right is defined by the Law of Georgia on Personal Data Protection: a subject may demand from the controller confirmation of whether data concerning him or her are being processed, receive detailed information about the processing, and inspect the data together with copies. On this page we explain what a subject may demand, within which terms and in what form the answer must arrive, and what obligation a company bears in responding to such requests.
What information the subject may receive
Under the law, the subject is entitled to demand confirmation of whether data concerning him or her are processed and whether the processing is justified, and — corresponding to the request and free of charge — to receive the following information: which data are processed and what the basis and purpose of the processing are; the source of collection or receipt of the data; the storage period, or where a specific term cannot be determined, the criteria for setting it; the subject's rights; the legal basis and purposes of transfers and the appropriate safeguards, where data are transferred to another state or an international organisation; the identity or categories of recipients; and the logic involved in a decision produced by automated processing, including profiling, its influence on the processing and its expected consequences. The list is complete: in one answer the subject receives the full picture of who, why and for how long uses the data.
Deadlines and form
The information must be provided to the subject no later than 10 working days from the request. In special cases, with proper justification, that term may be extended by no more than a further 10 working days, of which the subject must be notified immediately. Unless legislation provides otherwise, the subject may choose the form in which the information is supplied; where no other form is requested, the information is provided in the same form in which the request was made. In practice this means that an electronic request normally entails an electronic answer — unless the subject wishes otherwise.