1. Implementation of the Personal Data Protection law of Georgia Giorgi Giorganashvili Head of IT department of the Office of the personal data protection Inspector GITI 2015

2. Personal Data Personal data is any information related to the natural person The possibility of identification Relationship with a natural person

3. Protection of personal data Why is it important the protection of personal data? Privacy protection The protection of property Avoid material and moral damages to the person Crime prevention What is provided in Georgia, protection of personal data? The Constitution of Georgia Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data Additional Protocol to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data Law of Georgia on Personal Data Protection

4. Personal Data protection Inspector is responsible supervising the implementation of data protection legislation Personal Data Protection Inspector is responsible supervising the implementation of data protection legislation Citizens applications Public Educational Activities Providing consultation Inspections Control Lawful interception management system Main duties of the Inspector

5. Law of Georgia on Personal Data Protection Purpose This Law is intended to ensure protection of human rights and freedoms, including the right to privacy, during the personal data processing Scope of the Law This Law shall apply to the processing of data by automatic or semi-automatic means and to the processing by non-automatic means of personal data which form part of a filing system or are intended to form part of a filing system This Law shall not apply to when data processing are : for personal purposes for court proceedings purposes for the purposes of state security defined as a state secret

6. Data processor and its’ obligations Data processor Any natural or legal person who processes personal data for or on behalf of the data controller Obligations of data processor Principles must be observed during data processing Obligation to notify the personal data protection Inspector about filing system Obligations of data controller and data processor related to the disclosure of data The data processor must provide the data subject requested information about data processing Data security

7. Liability The citizens’ applications Inspection Sanctions Personal Data Protection Inspector ! The Inspector has the right to an administrative case review and imposition of administrative penalties

8. Filing system and filing system catalogue Filing system A structured set of data where they are arranged and available according to specific criteria The types of filing systems: › The employees' personal records Database; › Case management systems; › Database of criminal records; › Civil registry database; › Database of administrative fees; › Personal records Database of clients of Bank etc. Filing system catalogue A detailed description of structure and contents of the filing system

9. Registry of filling system catalogue Registry of filing system catalogues A registry providing a detailed record of the existing filing systems ! ! Data processor shall ensure that the information included in the catalog regularly updated.

10. Working process of the Registry of filling system catalogue

11. Monitoring of covert investigative action Analyzing information Compare information Lawfulness Verification Lawful management system

12. Additional e-system Training online registration Personal data inspector decisions online system

13. www.personaldata.ge www.pdp.ge Facebook Facebook.com/DPAGeorgiaOfficial Twitter- ზე twitter.com/DPAofGeorgia Internet and PDP

14. Questions