🇬🇪Georgia

Georgia has a modern personal data protection law

Georgia's Law on Personal Data Protection, Law No. 3144-XIმს-Xმპ of 14 June 2023, generally applied from 1 March 2024. The official final consolidation includes amendments through Law No. 1694-Vმს-XIმპ, published on 15 June 2026. From 2 March 2026, the State Audit Office of Georgia performs the supervisory functions previously assigned to the Personal Data Protection Service.

Operational points

The law requires lawful and transparent processing, detailed rules for surveillance and direct marketing, security, processing records, 72-hour incident reporting where the statutory threat threshold is met, DPIAs, DPOs for specified organisations, local representation in stated foreign-controller cases and controlled international transfers.

Parental or representative consent is required for consent-based processing of a minor under 16, subject to the law's special-category rule. Controllers should update policies and regulator references to the State Audit Office.