Bill

Bill > SB473


GA SB473

GA SB473
"Georgia Consumer Privacy Protection Act"; consumer personal data in this state; protect the privacy


summary

Introduced
02/08/2024
In Committee
03/20/2024
Crossed Over
02/27/2024
Passed
Dead
03/28/2024

Introduced Session

2023-2024 Regular Session

Bill Summary

AN ACT To amend Title 10 of the Official Code of Georgia Annotated, relating to commerce and trade, so as to enact the "Georgia Consumer Privacy Protection Act"; to protect the privacy of consumer personal data in this state; to provide for definitions; to provide for applicability; to provide for exemptions for certain entities, data, and uses of data; to provide for consumer rights regarding personal data; to provide for a consumer to exercise such rights by submitting a request to a controller; to provide for a controller to promptly respond to such requests; to provide for exemptions; to provide for responsibilities of processors and controllers; to provide for notice and disclosure; to provide for security practices to protect consumer personal data; to allow a controller to offer different goods or services under certain conditions; to provide for limitations; to provide for statutory construction; to provide for enforcement and penalties; to provide an affirmative defense; to prohibit the disclosure of personal data of consumers to local governments unless pursuant to a subpoena or court order; to provide for preemption of local regulation; to provide for related matters; to provide an effective date; to repeal conflicting laws; and for other purposes.

AI Summary

This bill enacts the "Georgia Consumer Privacy Protection Act" to protect the privacy of consumer personal data in the state. It applies to businesses that meet certain revenue and consumer data thresholds, while exempting certain entities, data, and uses of data. The bill grants consumers rights to access, correct, delete, and obtain copies of their personal information, and to opt out of the sale of their personal information or its use for targeted advertising or profiling. The bill imposes obligations on controllers and processors of personal data to limit data collection, secure data, and provide notice to consumers. The Attorney General has exclusive enforcement authority and can seek civil penalties for violations. The bill preempts local regulation of consumer personal data and takes effect on July 1, 2026.

Committee Categories

Business and Industry, Transportation and Infrastructure

Sponsors (11)

Last Action

House Committee Favorably Reported By Substitute (on 03/20/2024)

bill text


bill summary

Loading...

bill summary

Loading...
Loading...