Law note · Georgia

Law on Personal Data Protection, special categories of data

cite Law of Georgia on Personal Data Protection, Law No. 3144-XI, Art. 6 stage IN FORCE in force since 2024-03-01 kind Sensitive categories binds public and private bodies reviewed 2026-08-29

What it requires

An app that processes special-category data, including biometric or genetic data, from a person in Georgia must rely on one of Art. 6's 20 lawful grounds, most commonly the data subject's explicit consent.

When LexLint raises it

processes_biometrics
crawls_web
trains_models

What we found

Art. 6 lists special categories of data as race or ethnicity, political, religious, or philosophical belief, professional-union membership, health, sexual life, criminal-proceeding status, conviction or criminal record, trafficking or domestic-violence-victim status, and detention, plus biometric and genetic data processed to allow unique identification of a natural person, with 20 lawful grounds (a through t) for processing such data, far more elaborate than a bare consent-only rule.

One of those grounds, Art. 6(1)(i), permits processing where the data subject has made the data publicly available without explicit prohibition of its use. Georgia's biometric-specific Art. 9 regime applies independently on top of any Art. 6 basis, so a biometric identifier is never governed by Art. 6 alone.

Primary source

official statute text, Legislative Herald of Georgia (Matsne)

← Back to the example · Lint your app →