---
title: "Right of Access Requests"
url: "https://legal.ge/en/service/technology-and-digital-law-en/right-of-access-requests-en"
field: "Technology & Digital Law"
description: "Data subject information requests: rights, the 10-working-day deadline and copies under the Georgian data protection law. Legal.ge."
reviewed: "2026-02-15"
updated: "2026-11-07"
publisher: "legal.ge"
---

# Right of Access Requests

> Source: legal.ge, https://legal.ge/en/service/technology-and-digital-law-en/right-of-access-requests-en

## The right to request information: the Georgian legal frame

The institution of a data subject's information request is often labelled with a foreign abbreviation, but in Georgia the right is defined by the Law of Georgia on Personal Data Protection: a subject may demand from the controller confirmation of whether data concerning him or her are being processed, receive detailed information about the processing, and inspect the data together with copies. On this page we explain what a subject may demand, within which terms and in what form the answer must arrive, and what obligation a company bears in responding to such requests.

## What information the subject may receive

Under the law, the subject is entitled to demand confirmation of whether data concerning him or her are processed and whether the processing is justified, and — corresponding to the request and free of charge — to receive the following information: which data are processed and what the basis and purpose of the processing are; the source of collection or receipt of the data; the storage period, or where a specific term cannot be determined, the criteria for setting it; the subject's rights; the legal basis and purposes of transfers and the appropriate safeguards, where data are transferred to another state or an international organisation; the identity or categories of recipients; and the logic involved in a decision produced by automated processing, including profiling, its influence on the processing and its expected consequences. The list is complete: in one answer the subject receives the full picture of who, why and for how long uses the data.

## Deadlines and form

The information must be provided to the subject no later than 10 working days from the request. In special cases, with proper justification, that term may be extended by no more than a further 10 working days, of which the subject must be notified immediately. Unless legislation provides otherwise, the subject may choose the form in which the information is supplied; where no other form is requested, the information is provided in the same form in which the request was made. In practice this means that an electronic request normally entails an electronic answer — unless the subject wishes otherwise.

The full text is available on legal.ge after signing in: https://legal.ge/en/service/technology-and-digital-law-en/right-of-access-requests-en

### How quickly must my request be answered?

The information must be supplied no later than 10 working days from the request. In special cases, with proper justification, the term may be extended by no more than a further 10 working days, of which you will be notified immediately.

### Are access and copies free?

As a rule, yes. Two exceptions exist: a fee provided for by legislation, and a reasonable fee set by the controller for issuing data in a different form or because of request frequency. The fee must not exceed the resource actually expended.

### Can I ask about an automated decision?

Yes. The subject is entitled to information about a decision produced by automated processing, including profiling, the logic used, its influence on the processing and the expected consequences.

### In what form will the answer come?

Unless legislation provides otherwise, the subject chooses the form; where no other form is requested, the information is supplied in the same form as the request.