Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Georgia: PDPS releases four normative acts on the Data Protection Act 2023
On February 28, 2024, the Personal Data Protection Service (PDPS) published four normative acts as provided for in the Data Protection Act 2023 that came into effect on March 1, 2024.
What are normative acts about?
In particular, the normative acts concern:
criteria for determining if a data breach poses a significant threat to basic human rights and freedoms, and the procedure for reporting an incident to the PDPS;
criteria for determining the circumstances giving rise to the obligation to conduct a Data Protection Impact Assessment (DPIA) and the assessment procedure;
determining the persons responsible for processing and persons authorized for processing who are exempt from the obligation to appoint or designate a data protection officer (DPO); and
the approval of the special representative registration procedure with the PDPS.
You can read the press release here, the normative act on data breaches here, the one on DPIAs here, the one on the appointment of a DPO here, and the one on the special representative registration here, all only available in Georgian.