Georgia: The Personal Data Protection Service (PDPS) of Georgia published the report on the nine-month activity for 2024 on Tuesday, October 15, 2024.
Citizens’ responsibilities
During the accounting period, the Service received 1436 statements/ messages, of which 1301 (91%) were related to data processing in private organizations, 103 (7%) were in public institutions, and 32 (2%) were in law enforcement agencies.
Checking the legality of data processing (inspection)
The Service checked the legitimacy of data processing on 189 facts. 32% (60) were planned, and 68% (129) were unplanned.
Administrative violations revealed
The Service identified 340 cases of unlawful processing of personal data, 25 of which were reported from 2023 and completed during the fiscal period, and 315 cases based on inspections started and completed during the financial period. 79% (270) of cases would be related to the private sector, 20% (67) – to the public sector, and 1% (3) – to law enforcement agencies involved in illegal data processing.
Tasks and recommendations issued by the Service
The Service issued 444 tasks and recommendations to public institutions, private organizations, and law enforcement agencies.
Consultations issued by the Service
During the accounting period, the Service provided 14,252 oral (telephone and personal meeting format) and written consultations.
Control of activities carried out in the Central Bank of Hidden Investigation and Electronic Communication Identification Data
In 61 cases, the Service used the hidden monitoring-recording suspension mechanism (via an electronic control system) for telephone communication.
During the accounting period, the Service received eight messages from the person responsible for processing the data security breach (incident).
The Service conducted 99 meetings with 6105 attendees, some representing the data subject and the persons responsible for the processing.
Personal Data Protection Service (PDPS)
The Personal Data Protection Service (PDPS) is an independent state authority; its activities are:
- Monitoring lawfulness of personal data processing;
- Monitoring covert investigative actions and activities performed within the central databank of electronic communications identification data.
