2025-04-01

The Personal Data Protection Service presented 2024 activity report to the supreme representative body of Georgia

---

The Personal Data Protection Service presented 2024 activity report to the supreme representative body of Georgia.

The report includes information on the state of personal data protection in Georgia, Monitoring of the covert investigative actions and the activity carried out at the central databank of the electronic communication identification data.

“The past year was Significant for the alignment of national data protection legislation with European standards. In March 2024, the Law of Georgia “on Personal Data Protection” came into force which provides adequate guarantees for the effective protection of the rights and freedoms of data subjects and equips the independent supervisory authority for personal data protection with the necessary mechanisms and powers to operate effectively. In the process of European integration, the importance of harmonizing national personal data protection legislation with EU law is significant. Consequently, the Implementation of the new legislative standard has contributed to the development of Georgian personal data protection law – stated in the foreword by the President of the Personal Data Protection Service, Dr. Dr. Lela Janashvili.

It is noteworthy that, according to statistics from the past year, there has been an increase in the number of citizens' Applications to the Service, as well as the number of conducted inspections.

During the reporting period, the Service received a total of 1,662 applications/notifications — 52% (863) were applications, and 48% (799) were notifications. 90% (1,486) of received applications/notifications concerned data processing in private organizations, 8% (140) in public institutions, and 2% (36) in law enforcement sector.

In 2024, the Service conducted examination of the Lawfulness of Data Processing (Inspection) in 265 cases. Of these, 31% (83) were planned, while 69% (182) were unplanned.

During the reporting period, the Service identified 508 facts of unlawful personal data processing.

A total of 794 directives and recommendations were issued.

The Service received 11 notifications regarding data breaches (incidents) from data controllers during the reporting period.

In total, the Personal Data Protection Service provided 16,462 consultations.

The Personal Data Protection Service used the suspension mechanism of covert wiretapping and recording of telephone communications (via electronic control system) in 92 cases.

To raise awareness about personal data protection, the Service regularly holds public lectures, informational meetings, and trainings for representatives of the private and public sectors, as well as law enforcement bodies.

In 2024, the Service conducted 108 meetings with 6,522 participants, including both data subjects and data controllers/processors.

Full version of the report:

https://pdps.ge/files/content/PDPS%20ანგარიში%202024_1743494187.pdf