Law note · Georgia

Law on Personal Data Protection, comprehensive regime and lawful basis

cite Law of Georgia on Personal Data Protection, Law No. 3144-XI, adopted 14 June 2023, Arts. 1-5, 7-8 stage IN FORCE in force since 2024-03-01 kind Comprehensive regime binds public and private bodies reviewed 2026-08-29

What it requires

An app that collects, uses, or discloses the personal data of an individual in Georgia must establish a lawful basis for the processing under Art. 5 of the Law on Personal Data Protection.

When LexLint raises it

crawls_web
trains_models
generates_content
deploys_chatbot
automated_outreach
high_risk_decisions
processes_voice
processes_biometrics

What we found

The Law of Georgia on Personal Data Protection, Law No. 3144-XI, adopted 14 June 2023, replaced the 2011 Law on Personal Data Protection outright: Art. 89 declares the 2011 law invalid. Commencement was staged under Art. 90: non-substantive provisions took effect on promulgation in June 2023, while the bulk of substantive articles, including Arts. 1-5, 7-30, 32, 34-79, 81, and 83-89, entered into force 1 March 2024.

Lawful bases sit at Art. 5, which was not read article-by-article for this document; Art. 6's special-category grounds were read in full and are recorded in a separate instrument.

Primary source

official statute text, Legislative Herald of Georgia (Matsne), fully consolidated text with inline amendment-history footer

← Back to the example · Lint your app →