2024-04-17

Personal Data Protection Service released the 3-month activity report of 2024

---

Personal Data Protection Service released the 3-month activity report of 2024.

• Citizen’s applications

During the reporting period, the service received 666 applications/notifications, 601 (90%) applications/notifications related to data processing in private institutions, 58 (9%) — in public institutions, and 7 (1%) — in law enforcement bodies.

• Examination of the lawfulness of data processing (inspection)

The Service initiated 57 examinations (inspections) of data processing lawfulness, out of which 42% (24) were planned, whereas 58% (33) were unplanned inspections. Revealed administrative offences.

• Revealed administrative offences

The Service identified 29 cases of unlawful processing of personal data, out of which 25 cases were studied in the scope of the examinations (inspections) initiated in 2023 and conducted (completed) in the reporting period, while 4 cases were studied in the scope of the examinations (inspections) initiated and conducted in 2024. 66% (19) of administrative offences revealed by the Service related to unlawful data processing in the private sector, 34% (10) — in the public sector, and 0% (0) — in law enforcement bodies.

• Instructions and recommendations issued by the service

The service gave 58 instructions and recommendations to public institutions, private organizations as well as to law enforcement bodies.

• Consultations provided by the service

During the reporting period, the service provided 6781 consultations both orally (via telephone communications and in-person meetings) and in writing.

• Monitoring of the covert investigative actions and the activities carried out at the central databank of the electronic communication identification data

The Service used the suspension mechanism of covert wiretapping and recording of telephone communications (via electronic control system) in 13 cases.

During the reporting period, the Service received one notification regarding the data breach (incident) from the data controller.

The Service conducted 47 meetings with 2635 attendees, represented by the data subjects as well as data controllers.

More in detail:

https://pdps.ge/files/content/PDPS_Activity%20Report%20for%203%20Month%20(January-March)_%202024_ENG_en_1713337810.pdf