Georgia DPL Scope + applicability + 2023 GDPR-aligned amendments. SCOPE: applies to natural-person personal data processing in Georgia + (post-2023 amendments) EXTRATERRITORIAL APPLICATION to processing related to offering of goods or services to data subjects in Georgia or monitoring of behaviour in Georgia (GDPR Art. 3(2) aligned). APPLICABILITY: controllers + processors operating in Georgia + foreign entities with Georgia-targeted activities; public authorities + private sector + non-profits. DEFINITIONS: PERSONAL DATA = information relating to an identified or identifiable natural person (GDPR-aligned); CONTROLLER + PROCESSOR (GDPR-aligned roles); CONSENT (freely given + specific + informed + unambiguous); SENSITIVE DATA (Art. 9 GDPR special categories); CHILD = under 16 (Georgia age of digital consent); BIOMETRIC + GENETIC DATA per GDPR. 2023 AMENDMENTS (Law No. 3144-RS of 2 June 2023; effective 1 March 2024 + delayed elements 1 May 2024 + 1 September 2024): substantially modernised + GDPR-aligned the original 2012 framework + added: extraterritorial scope; enhanced data subject rights (portability + automated decision-making protections); breach notification 72-hour SLA + risk-tier; DPIA mandatory for high-risk; mandatory DPO for public + large-scale + special-category processing; cross-border transfer SCC/BCR mechanisms; substantially-increased sanctions; PDPS-empowerment. EXEMPTIONS: household + personal purposes; journalism + literary + artistic expression; national security + law enforcement (with separate regime).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.