Georgia DPL compliance program implementation roadmap. ORGANIZATIONAL ROLES: (a) PRIVACY COUNSEL / DPO (mandatory per 2023 amendments for public + large-scale + special-category processing); (b) PDPS COORDINATOR - PDPS-contact-point + audit cooperation + breach notification + complaint response; (c) CYBERSECURITY LEAD - 72-hour breach + Cybersecurity Act 2025 readiness; (d) INTERNATIONAL TRANSFERS LEAD - SCCs + BCRs + Adequacy + Convention 108+ readiness; (e) RECORDS MANAGER - RoPA + DPIA + retention; (f) TRAINING COORDINATOR - awareness + role-specific. OPERATIONAL CONTROLS: (a) RoPA + DPIA registers + risk assessment; (b) data subject rights portal + 30-day SLA; (c) consent management + age-of-consent + parental verification; (d) breach detection + 72-hour notification procedure; (e) cross-border transfer assessment + safeguards; (f) DPO appointment + PDPS notification; (g) sectoral-specific compliance (employment + healthcare + financial). LANGUAGES: Georgian (state language) + Russian + English for international + customer notices. METRICS: rights requests volume + SLA + DPIA coverage + breach response time + PDPS engagement + sector compliance. 2024-2025 PRIORITIES: 2023 amendment implementation + EU accession + Convention 108+ ratification + Cybersecurity Act 2025 readiness + AI Act alignment + post-pandemic remote work + cross-border data flows + political risk management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.