Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Georgia: PDPS releases four normative acts on the Data Protection Act 2023

On February 28, 2024, the Personal Data Protection Service (PDPS) published four normative acts as provided for in the Data Protection Act 2023 that came into effect on March 1, 2024.

What are normative acts about?

In particular, the normative acts concern:

  • criteria for determining if a data breach poses a significant threat to basic human rights and freedoms, and the procedure for reporting an incident to the PDPS;

  • criteria for determining the circumstances giving rise to the obligation to conduct a Data Protection Impact Assessment (DPIA) and the assessment procedure;

  • determining the persons responsible for processing and persons authorized for processing who are exempt from the obligation to appoint or designate a data protection officer (DPO); and

  • the approval of the special representative registration procedure with the PDPS.

You can read the press release here, the normative act on data breaches here, the one on DPIAs here, the one on the appointment of a DPO here, and the one on the special representative registration here, all only available in Georgian.