This article examines decisions issued by the Personal Data Protection Service (PDPS) in order to assess the practical implementation of Georgia’s Law on Personal Data Protection, which entered into force on 1 March 2024. An analysis of the early decisions indicates that enforcement is gradually developing and already provides valuable insight into the areas in which data controllers continue to improve their understanding and compliance practices under the new legal framework. The article highlights the importance of further regulatory guidance and consistent enforcement measures, which can contribute to strengthening compliance and enhancing the effective protection of data subjects’ rights.
Global Privacy Law Review