USA – GEORGIA Trends and Developments Contributed by: Jason Loring, Andrew Lee and Lara Sevener, Jones Walker LLP
Conclusion Georgia’s privacy landscape in early 2026 is defined by intersecting legal contests across all three branches of government. The repeated failure of comprehensive legislation, the constitutional battle over SB 351, the emergence of common law breach liability, the judici - ary’s first encounter with AI fabrications and the AG’s expansive enforcement posture each demand atten - tion from practitioners advising clients with Georgia operations, and none can be understood in isolation. The central message for data protection profession - als is that the absence of legislation does not mean regulatory relief. Georgia imposes breach notifica - tion requirements, evolving common law standards and federal sectoral obligations, and its AG is using existing enforcement tools aggressively in the interim. Georgia’s posture also stands in growing contrast to that of its immediate neighbours: Florida enacted a comprehensive consumer privacy law in 2023, Ten - nessee enacted one in 2024 and North Carolina is among the states actively advancing comprehensive legislation. As more Southeast states establish statu - tory frameworks, Georgia businesses will face those obligations across state lines while their home-state framework remains unsettled. Organisations seri - ous about managing their Georgia privacy exposure should invest in proactive programme design now, without waiting for legislative clarity that may not arrive on any predictable schedule.
enforcement authority constitutes a multifaceted pos - ture unlikely to diminish. Looking ahead The 2026 Georgia legislative session presents anoth - er opportunity to enact comprehensive consumer privacy legislation. The structural conditions have not fundamentally shifted: the Senate’s institutional commitment to a Virginia-model framework remains strong and the House’s resistance equally persistent. Any path to enactment likely requires targeted amend - ments to applicability thresholds and consumer rights provisions or a political catalyst (eg, federal action, a high-profile Georgia breach or continued regional competitive pressure) sufficient to break the impasse. Whether sponsors revive SB 111 or introduce a suc - cessor measure is itself an early indicator worth watching. The Eleventh Circuit’s decision in NetChoice v Carr will likely be among the most consequential priva - cy law developments of 2026 for Georgia and the nation. Reversal, finding that Free Speech Coalition v Paxton’s intermediate scrutiny framework extends to broad-based social media regulation, would acti - vate SB 351’s requirements on relatively short notice. Affirmance would shift attention to whether Georgia’s constitutional defects can be remedied through nar - rower drafting or whether the challenge is more fun - damental. The common law framework established by Bland will continue developing through trial court and appellate decisions; as subsequent cases reach the Court of Appeals, the merits-stage contours of reason - able security, injury and causation will become clearer, with significant consequences for litigation strategy, cybersecurity investment decisions and insurance pricing. The judicial and professional response to AI in legal proceedings, initiated by Shahid, is also likely to develop further through additional sanctions deci - sions, court rules or advisory opinions; privacy and technology practitioners should treat it as the opening chapter of a longer conversation.
587 CHAMBERS.COM
Powered by FlippingBook