J&T Consulting offers clients legal assistance in the field of personal data protection. It is essential that the legal documentation of a business entity complies with current legislation. Our lawyers collaborate closely with clients and, when preparing legal documentation, ensure that the needs of the client companies are taken into account, safeguarding their interests and meeting legislative requirements.

On March 1, 2024, the main part of the new Law on Personal Data Protection entered into force. The new law imposed an obligation on public institutions and a number of private organizations to appoint a Personal Data Protection Officer. This new requirement has been in effect since June 1, 2024. The said law reflects GDPR data protection principles, such as data subject consent, data minimization, restriction of data access, and individual rights, in order to ensure compliance with European Union standards.

The new law defined the institutions that are required to have a Personal Data Protection Officer (an employee responsible for the processing of personal data within the organization), which includes organizations that process a large volume of data subjects' data or carry out systematic and large-scale monitoring of their behavior.

Our Services in the Field of Personal Data Protection

Our team provides legal assistance in the field of personal data protection to large companies operating in Georgia.

Our services in the field of personal data protection include:

• Ensuring the compliance of all client company documentation with current legislation;

• Assisting the client company in managing all elements of personal data protection;

• Preparing relevant recommendations regarding problematic issues, including proposals on what should be done to eliminate the problem;

• Assistance in the implementation of our recommendations;

• Assistance and consultations in selecting a candidate for the Data Protection Officer position;

• Proper training of the Data Protection Officer.

Preparation of Necessary Documents

The new law obliges organizations to implement appropriate technical and organizational measures to ensure the security of personal data, which implies the preparation of relevant documents. Our team can assist you in preparing all necessary documents, including:

• Employee personal data processing policy;

• Rules for processing personal data;

• Customer personal data protection policy;

• Rules for conducting audio monitoring;

• Rules for conducting video monitoring in buildings and on the external perimeter;

• Personal data protection policy to be included in contracts concluded with contractors;

• Rules on the implementation of incident-related measures;

• Criteria for determining the circumstances giving rise to the obligation of a data protection impact assessment and the assessment rules.