What is the data breach notification deadline in Georgia?

Georgia requires notice to affected individuals in the most expedient time possible and without unreasonable delay (Ga. Code §10-1-910 et seq.).

Do you have to notify the Georgia Attorney General of a data breach?

Georgia does not require attorney-general notice for private-entity breaches.

← All jurisdictions

GA · data breach notification

Georgia

med

Ga. Code §10-1-910 et seq.

Individual deadline

No fixed limit

Trigger standard

Any breach

AG / regulator

Not required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	None, notice required on any qualifying breach of covered personal information.
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	Not required for private-entity breaches.
Credit reporting agencies	Notify CRAs above 10,000 residents.
Substitute notice	Typically available above $250,000 cost / 500,000 affected (verify).
Private right of action	No, enforcement by the state.

Notes

※ Narrow scope: applies to information brokers and data collectors

Rule last verified July 10, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a Georgia breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →