Bill > HB886

This bill establishes new regulations for how state and local government entities in Georgia must respond to ransomware attacks. The legislation defines key terms, including "ransomware activity" as restricting access to computer systems or data by encrypting it and demanding a ransom payment, and encompasses a broad range of government entities from state departments to local school districts and law enforcement agencies. The bill explicitly prohibits state agencies and local government entities from paying ransoms or directly communicating with individuals or organizations conducting ransomware attacks. Instead, when a ransomware incident occurs, the affected government entity is required to immediately consult with the Georgia Technology Authority (GTA), which will provide guidance and coordinate the response. The affected entity must also provide the GTA with any information necessary to address the ransomware situation. By mandating this centralized, non-payment approach, the bill aims to create a standardized and strategic response to cyber extortion attempts that could potentially protect government systems and taxpayer resources.

Government Affairs

https://www.legis.ga.gov/legislation/71892