Implementation of the Personal Data Protection law

of Georgia

Giorgi GiorganashviliHead of IT department of the Office of the personal data protection Inspector

GITI 2015

Personal Data

Personal data is any information related to the natural person

The possibility of identification

Relationship with a natural person

Protection of personal dataWhy is it important the protection of personal data?• Privacy protection• The protection of property• Avoid material and moral damages to the person• Crime prevention

What is provided in Georgia, protection of personal data?• The Constitution of Georgia• Council of Europe Convention for the Protection of Individuals with regard to

Automatic Processing of Personal Data• Additional Protocol to the Convention for the Protection of Individuals with

regard to Automatic Processing of Personal Data• Law of Georgia on Personal Data Protection

Personal Data protection InspectorPersonal Data Protection Inspector is responsible supervising the implementation of data protection legislation

WWW.PDP.GE

Citizens applications

Public Educational ActivitiesProviding consultation

Inspections

Control Lawful interception management system

Main duties of the Inspector

Law of Georgia on Personal Data Protection

PurposeThis Law is intended to ensure protection of human rights and freedoms, including the right to privacy, during the personal data processing

Scope of the LawThis Law shall apply to the processing of data by automatic or semi-automatic means and to the processing by non-automatic means of personal data which form part of a filing system or are intended to form part of a filing system

This Law shall not apply to when data processing are :• for personal purposes• for court proceedings purposes• for the purposes of state security• defined as a state secret

Data processor and its’ obligationsData processorAny natural or legal person who processes personal data for or on behalf of the data controller

Obligations of data processor

Principles must be observed during data processing

Obligation to notify the personal data protection Inspector about filing

system

Obligations of data controller and data processor related to the

disclosure of data

The data processor must provide the data subject requested information

about data processing

Data security

Liability

The citizens’ applications

Inspection

Sanctions

Personal Data Protection Inspector

! The Inspector has the right to an administrative case review and imposition of administrative penalties

Filing system and filing system catalogue

Filing systemA structured set of data where they are arranged and available according to specific criteria

The types of filing systems:› The employees' personal records Database;› Case management systems;› Database of criminal records;› Civil registry database;› Database of administrative fees;› Personal records Database of clients of Bank etc.

Filing system catalogueA detailed description of structure and contents of the filing system

Registry of filling system catalogue

Registry of filing system cataloguesA registry providing a detailed record of the existing filing systems

CATALOG.PDP.GE

! Data processor shall ensure that the information included in the catalog regularly updated.

Working process of the Registry of filling system catalogue

Monitoring of covert investigative action

Analyzing information

Compare information

Lawfulness Verification

Lawful management system

Additional e-system

Training online registration

Personal data inspector decisions online system

WWW.PDP.GE

APP.PDP.GE/DECISION

APP.PDP.GE/TRAINING

www.personaldata.gewww.pdp.ge

Facebook Facebook.com/DPAGeorgiaOfficial

Twitter-ზე twitter.com/DPAofGeorgia

Internet and PDP

Questions