Georgia: The Personal Data Protection Service (PDPS) of Georgia has published the three-month activity report for 2024.
Citizen’s involvement
During the accounting period, the Service received 666 statements/messages, of which 601 (90%) were related to data processing in private organizations, 58 (9%) – public agencies, and 7 (1%) – law-enforcement agencies.
Checking the legality of data processing (inspection)
The Service checked the legality of data processing (inspection) on 57 facts. 42% (24) took place as planned, and 58% (33) – unplanned.
Affected administrative violations
The Service has identified 29 facts of unlawful processing of personal data, 25 of which were based on inspections that started in 2023 and ended in the financial period, and four facts were based on inspections (inspections) that started and ended in the accounting period. 66% (19) of the cases were related to the private sector, 34% (10) to the public sector, and 0% (0) to illegal data processing in law enforcement bodies.
Tasks and recommendations issued by the office
The Service issued 58 assignments and recommendations for public institutions, private organizations, and law enforcement agencies.
The office gives consultations.
During the accounting period, the Service provided 6781 oral consultations (telephone and personal meetings format).
Control of activities carried out in the Central Bank of Secret Investigations and Electronic Communication Identification Data
In 13 cases, the Service used a hidden surveillance-suspension mechanism for telephone communication (via an electronic control system).
During the accounting period, the Service received one message from the person responsible for data processing on generating a data security breach (incident).
The office held 47 meetings with 2635 attendees, some representing the data subject and the person responsible for processing.
Personal Data Protection Service
The Personal Data Protection Service (PDPS) is an independent state authority; its activities are:
- Monitoring lawfulness of personal data processing;
- Monitoring covert investigative actions and activities performed within the central databank of electronic communications identification data. Control over the legality of personal data processing in Georgia dates back to 2013.
