Law on Personal Data Protection, comprehensive regime and lawful basis

Law of Georgia on Personal Data Protection, Law No. 3144-XI, adopted 14 June 2023, Arts. 1-5, 7-8

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 March 2024.

A comprehensive regime rule binding public and private bodies.

As of 29 August 2026.

What it requires

An app that collects, uses, or discloses the personal data of an individual in Georgia must establish a lawful basis for the processing under Art. 5 of the Law on Personal Data Protection.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The Law of Georgia on Personal Data Protection, Law No. 3144-XI, adopted 14 June 2023, replaced the 2011 Law on Personal Data Protection outright: Art. 89 declares the 2011 law invalid. Commencement was staged under Art. 90: non-substantive provisions took effect on promulgation in June 2023, while the bulk of substantive articles, including Arts. 1-5, 7-30, 32, 34-79, 81, and 83-89, entered into force 1 March 2024.

Lawful bases sit at Art. 5, which is not set out article-by-article here; Art. 6's special-category grounds are read in full and recorded in a separate instrument.

When LexLint raises it

crawls_web
trains_models
generates_content
deploys_chatbot
automated_outreach
high_risk_decisions
processes_voice
processes_biometrics

Read the law

official statute text, Legislative Herald of Georgia (Matsne), fully consolidated text with inline amendment-history footer

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app