Law on Personal Data Protection, special categories of data

Art. 6 lists special categories of data as race or ethnicity, political, religious, or philosophical belief, professional-union membership, health, sexual life, criminal-proceeding status, conviction or criminal record, trafficking or domestic-violence-victim status, and detention, plus biometric and genetic data processed to allow unique identification of a natural person, with 20 lawful grounds (a through t) for processing such data, far more elaborate than a bare consent-only rule; two of those twenty, Art. 6(1)(r) and Art. 6(1)(s), are not yet in force, each carrying its own later commencement date fixed by Article 90 of this Law, distinct from the 1 March 2024 date the rest of Art. 6 took effect on.

One of those grounds, Art. 6(1)(i), permits processing where the data subject has made the data publicly available without explicit prohibition of its use. Georgia's biometric-specific Art. 9 regime applies independently on top of any Art. 6 basis, so a biometric identifier is never governed by Art. 6 alone.