Soda Labs

Georgia

The one place where privacy oversight went backwards

JurisdictionEuropeRestricts anonymity

Anonymity-enhancing assets or unattributed transfers are barred outright, or barred for regulated firms.

What Georgia actually says

Across every jurisdiction surveyed for this section, institutional privacy oversight was either strengthening or holding steady. Georgia is the exception. Its independent data protection authority was liquidated in March 2026 and the function folded into the State Audit Office, which removes the separation that made the supervisor independent in the first place. On the financial side the picture is restrictive but conventional: providers have registered with the central bank since mid-2023, and using virtual assets for payment is barred by the organic law governing the central bank. Peer-to-peer trading with one's own funds stays outside the regime. We found no instrument addressing anonymity-enhancing assets either way.

The instruments that matter

Data protection authority abolished 2 March 2026
the independent Personal Data Protection Service was liquidated and its supervisory, inspection and complaint functions transferred to the State Audit Office
Virtual asset payments prohibited
under Article 39¹(2) of the Organic Law on the National Bank, except in cases the central bank defines as necessary to provide virtual asset services
Provider registration since 1 July 2023
under Governor's Decree N94/04 of 13 June 2023, imposing fit-and-proper, head office, systems and anti-money-laundering requirements on FATF lines
Peer-to-peer left alone
trading with one's own funds does not trigger registration

What this means for confidential transactions

Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.

Compliant by default.

See how selective disclosure satisfies a supervisor without publishing your book to the world.