Cybersecurity Policy Report, Privacy Legislation Clears Georgia Senate, (Mar 4, 2025)
The Georgia state Senate this week voted to pass the proposed Georgia Consumer Privacy Protection Act, which seeks to establish a statewide framework for data protection and grant consumers certain rights related to their personal data.
SB 111 gives consumers the right to confirm whether a controller is processing their personal information and to access such personal information; correct inaccuracies in the consumer’s personal information; delete personal information provided by or obtained about the consumer; and obtain a copy of the consumer’s personal information that the consumer previously provided in a portable and readily usable format. Consumers would also be allowed to make the decision to opt out of the collection and processing of their personal information for purposes such as the sale of personal information, targeted advertising, or profiling.
The provisions of the bill would apply to entities with more $25 million in revenue targeting Georgia consumers and that (1) control or process personal information of at least 25,000 consumers and derive more than 50% of gross revenue from the sale of personal information; or (2) during a calendar year, control or process personal information of at least 175,000 consumers.
The bill also would direct controllers to limit the collection of personal information to what is “adequate, relevant, and reasonably necessary” in relation to the purposes for which the data is processed. In addition, controllers would have to conduct “data protection assessments” and make such assessments available to the attorney general upon request.
The bill gives the attorney general the exclusive authority to enforce these provisions. It also requires the attorney general to provide a controller or processor 60 days to cure an alleged violation before initiating an action.
The bill has an effective date of July 1, 2026.
The bill (S.B. 111, Reg Sess.) is sponsored by Sens. John Albers (R.) and Max Burns (R.).
News: StateLegislation DataPrivacy