Georgia: Issued PDPS ruling imposing a fine of GEL 4'000 on Yandex GO/Yandex Pro for illegally transferring personal data

On 23 September 2024, the Georgian Personal Data Protection Service (PDPS) issued a ruling fining Raidtech Georgia Ltd. (Yandex GO/Yandex Pro) GEL 4'000 for illegally transferring personal data of Georgian customers (drivers and passengers) to servers located in Russia. During the investigation, it was found that the app was connected to Russian servers, exposing the global network address (IP address) of users from Georgia. The company had previously requested permission to transfer data to Russia, but the request was denied due to insufficient guarantees of data protection in Russia. As a result, alongside the fine, the company was ordered to cease the data transfer to Russia, having violated Georgia's personal data protection laws.