Georgia Law on Personal Data Protection 2023

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	GE PDPL
Region	Europe
Country or scope	Georgia
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers GE PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`GE-PDPL-SEC` Data Security	Controllers and processors must take organizational and technical measures ensuring protection of data against accidental or unlawful destruction, alteration and unauthorized access; component integrity hashes evidence tamper protection (Georgia PDPL 2023 data-security obligation)	Scan
`GE-PDPL-REC` Records of Processing	Controllers and processors must document and record their processing activities, which presupposes an inventory of the software systems and components performing the processing (Georgia PDPL 2023 records obligation)	Scan
`GE-PDPL-PROC` Processor Engagement	Processing may be assigned only to processors providing adequate guarantees, on the basis of a written contract, requiring visibility into who supplies the software used for processing (Georgia PDPL 2023 processor provisions)	Scan
`GE-PDPL-BRE` Breach Notification Readiness	Data breaches must be notified to the Personal Data Protection Service within 72 hours, which requires being able to identify precisely which software components were affected (Georgia PDPL 2023 breach-notification obligation)	Scan
`GE-PDPL-VER` State-of-the-Art Safeguards	Safeguards must reflect the state of the art and the risks of processing, which requires knowing the exact versions of deployed components so their weaknesses can be assessed (Georgia PDPL 2023 by-design/security provisions)	Scan

All 22 from the standard set, adapted to GE PDPL.