The provisions of the new legislation - On Personal Data Protection

The provisions of the new legislation “On Personal Data Protection” adopted by Georgian Parliament will come into force from March 1, 2024.

On June 14, 2023, the Parliament of Georgia successfully adopted the new legislation “On Personal Data Protection” in the third reading, which substantially changed existing regulations concerning the processing of personal data and expanded the grounds for data processing. Until now, the restrictive nature of the law and its inflexible norms were a significant obstacle in terms of freedom of information in the country. Before the change the list of data processing bases, coupled with restrictive norms surrounding special categories of data, created an unreasonably disproportionate balance between the protection of personal data and freedom of expression and access to information, which was accompanied by the practice of interpretation of legislative provisions massively against the content of freedom of information.

The law encompasses a multitude of cutting-edge advancements in line with the best international standards for personal data protection. Its execution will be carried out gradually.

The provisions which will come into force from March 1, 2024:

1. • Commercial text messages will not be sent without consent obtained beforehand
   • The regulations and terms regarding audio recording (audio monitoring) in public or private spaces are established
   • The regulations regarding video recording (video monitoring) through cameras installed in public or private spaces are further defined
   • Legal guarantees for the protection of minor’s personal data are established
   • The obligation to notify the inspector in case of data protection violation is established
   • The grounds for data processing are enhancing
   • The rights of individuals whose data is processed are enhanced