Licensing company data in Georgia: few state rules, so the contracts decide
Georgia has no comprehensive consumer privacy law and its breach statute is built around two defined terms, information brokers and data collectors. That leaves a Georgia company with fewer state rules than a New York or California one, and more weight on its own customer contracts and on the privacy statements it has already made.
Where Georgia stands
| Question | Answer as of 2 November 2026 |
|---|---|
| Comprehensive privacy law | No. It is not on the list of enacted state laws kept by the tracker we checked on 2 November 2026. |
| Breach notice | Official Code of Georgia 10-1-910 and following. The duties fall on information brokers and data collectors as section 10-1-911 defines them. Commentators describe the business definition differently, so read it with counsel. |
| Recording calls | One-party consent. A participant may record the conversation. |
| Who enforces | The Attorney General for consumer protection. |
What drives a deal when state law is thin
When the state rules are light, a buyer’s diligence leans on what the company promised. Its website privacy notice, its customer terms and any data processing addendum it signed are the documents that say what may be done with a record. A Georgia company with a customer list that includes banks, hospitals or schools in other states carries their requirements too.
The federal rules also attach to the data, not the company’s address. Health, financial and student records follow the laws listed in the United States rules wherever the company sits.
Filmed and logistics records
Georgia’s film production and logistics industries hold records of a particular kind: production files, call sheets, cargo documents and dispatch notes. For these, the rights question usually matters more than the privacy question, since a production file may include material owned by a studio or a performer. Check ownership first.
Read next
- United States rules. The federal laws behind every state.
- Other states. What each state adds.
- De-identification. How personal detail comes out.
- Liability. Who answers for what in a deal.
Questions about licensing company data in Georgia: few state rules, so the contracts decide
Does Georgia’s breach law apply to every business?
Its terms name information brokers and data collectors. Read the definitions in the statute with counsel to see whether a given company fits.
So is anything allowed?
No. Contracts, federal law, the company’s own statements and other states’ laws for its customers all remain.
Can we record a call with a customer in another state?
Georgia allows one-party consent, but the other person’s state may require all parties to consent.
Where should a Georgia company start?
Start with an inventory: which systems hold what, since when, and under which customer contracts. Then read the privacy notice the company has published, because that notice is the promise a buyer and a regulator will both hold it to. State law adds little here, so these two documents do the work.
Didn't find your question? Ask us directly.