Subject Access Requests (SAR) Georgia | Legal.ge

SubjectAccessRequests

How much does it cost to request info from a company?

According to the law, receiving information is free. A company cannot charge you unless requests are frequent or repetitive.

In what format will I receive the information?

You have the right to choose the format—written, electronic, or oral. The company must comply if technically feasible.

Can a company refuse to give me info?

Only in exceptional cases provided by law (e.g., endangering an investigation or state security). The refusal must be substantiated.

How soon will I get a response?

The company is obliged to respond immediately, or no later than 10 days.

Subject Access Requests (SAR) and Right to Access Information

Do you wonder what information a bank, mobile operator, or your employer holds about you? The Law on Personal Data Protection (Article 13) grants you the right to request and receive full information about the processing of your data at any time. This procedure is internationally known as a "Subject Access Request" (SAR). It is a powerful tool allowing you to find out: what data is processed, for what purpose, where it was obtained, and to whom it was transferred. Although this right is guaranteed, companies often create artificial barriers, delay responses, or provide incomplete information. Our service helps you fully exercise this right.

Lawyers on our platform offer preparation and management of Subject Access Requests. The service includes:

Request Formulation: Drafting a written application with precisely stated questions (e.g., asking for audio recordings, logs, contracts) so the company cannot evade answering.
Identification Procedure: Consulting on how to verify your identity when sending the request so the company cannot refuse on the grounds of "inability to identify."
Deadline Monitoring: Ensuring the company responds within the statutory 10-day period.
Response Analysis: Legal assessment of the received information—is it complete and compliant with the law?
Appeals: If the company refuses to release information or provides incomplete data, preparing a complaint to the Personal Data Protection Service.

Practical scenario: An employee is fired and wants to know what information the former employer holds about them (e.g., email correspondence, access logs) to use in a lawsuit. The employer often refuses, citing "trade secrets." A qualified SAR forces the company to release personal data. Another example: A citizen is denied a loan. They have the right to request information on the criteria used for evaluation (profiling) and where the bank obtained negative information. This information is essential for subsequently correcting the data.

The legal basis is the Law of Georgia on Personal Data Protection. The law states that obtaining information is free of charge (unless the request is repetitive and groundless). The company is obliged to provide copies of the data. Hiding information is a serious violation.

Working with a lawyer ensures your request is legally "bulletproof." Companies are cautious when they see a professionally drafted request because they know the next step could be a complaint to the Inspector. This increases the chances of receiving information quickly and fully.

Legal.ge offers a simple way to reclaim your informational sovereignty. Find out what they know about you. Request your file today with the help of our experts.