The new Law of Georgia “On Personal Data Protection,” has increased the rights of data subjects. One of the important rights is the right to withdraw the consent given by a person regarding the processing of his/her personal data. 

Many of us have experienced situations where we register on a website, provide our data, inadvertently agree to receive promotional messages, and then face a flood of unsolicited communications. In such instances, it’s crucial to remember that you have the right to request any company at any time to stop sending you advertising and/or informational messages. Simply put, you have the right to withdraw your consent without any explanation. This process should be straightforward, free, and not require any special effort from you. 

You have the right to withdraw your consent in the same manner in which you initially provided it. For example, if you consented via email confirmation, you have the right to request the termination of data processing by email. If you consented by checking a specific box on a website, you should be able to withdraw your consent by unchecking the same box on the website. 

Upon request, data processing must be ceased, and any processed data should be deleted or destroyed within 10 working days, unless there are other legal grounds for data processing. 

Failure to comply with this obligation may result in fines ranging from 1,000 to 4,000 GEL, depending on the severity of the violation and the company’s annual turnover. 

If you have encountered a situation where you have requested consent withdrawal, and your data is still being processed, please contact us for detailed information on how to protect your rights.