LEGAL BASES AND LIABILITY MECHANISMS FOR PROCESSING PATIENT HEALTH DATA IN GEORGIA: A COMPARISON WITH EUROPEAN STANDARDS

The present article examines the legal bases for processing patient personal data, especially health data, and the liability mechanisms in case of their violation in the context of medical activity. The research is based on normative-dogmatic and comparative-legal methods and combines European data protection standards, international human rights protection mechanisms and professional ethical norms, as well as Georgian national legislation and administrative practice. The aim of the research is to systematically analyze the legal bases and liability framework for processing patient personal data in the context of medical activity, by identifying those legal mechanisms that ensure effective protection of patient data, and in case of violation - appropriate imposition of liability. The normative model of technical and organizational obligations for health data processing in electronic systems is separately analyzed as a practical tool of legal control. The article structurally includes: (I) the status of health data; (II) the legal basis for data processing; (III) forms of liability and administrative response, including professional standards and regulation of electronic systems. The final part formulates recommendations for strengthening the real, and not only formal, provision of patient data protection and rights.