Local Self-Government and Personal Data Protection: Regulatory Standards and Digital Risks

Abstract

The contemporary digital era poses significant challenges for local self-governments, where, alongside ensuring the efficient delivery of services to citizens, the protection of personal data has become a central concern. The implementation of information systems, electronic services, and “smart city” technologies by local authorities increases both the volume of data processed and the exposure to cybersecurity risks. Consequently, personal data protection is not merely a legal obligation but also a political, technological, and ethical issue. This article aims to examine the relationship between local self-governance and personal data protection standards, identify digital risks, and explore the legal frameworks in place. Special emphasis is placed on the legislative amendments introduced in 2024, which have significantly updated both Georgian legislation and EU data protection practices. The study analyzes how these changes impact local governance, their alignment with GDPR principles, and the challenges arising from technological resources, institutional coordination, and citizen trust. The article demonstrates that enhancing data protection policies requires not only legislative harmonization but also the strengthening of local authorities’ capacities, the training of specialists, and the development of an information security culture. The conclusion offers concrete recommendations, including the formulation of local personal data protection strategies, the implementation of digital risk prevention mechanisms, and the promotion of citizen engagement. In doing so, the article provides both theoretical insights and practical approaches that support the protection of citizens’ rights and strengthen democratic governance in a digital environment.