Can I sell personal information without obtaining consent in Georgia? What are the requirements?

Selling Personal Information in Georgia

Based on the context documents provided, it is generally not legal to sell personal information without obtaining consent in Georgia. The GARR Rule 80-11-1-.07 and GACO 16-11-66 both mention the importance of obtaining consent before disclosing personal information. Additionally, GACO 46-5-211 requires telecommunications companies to obtain express consent from end users before releasing their telephone records with a Georgia billing address.

Requirements for Obtaining Consent

The specific requirements for obtaining consent may vary depending on the situation, but it is generally recommended to obtain explicit and informed consent from individuals before disclosing their personal information.

Notification Requirements in the Event of a Data Breach

O.C.G.A. § 10-1-912 requires businesses to provide notice to Georgia residents in the event of a data breach that results in access or likely access to unencrypted personal information. The GARR Rule 80-14-1-.05 also requires licensees to provide a duplicate of such disclosure to the Department in the event of an information security incident involving unauthorized access to personal information. Additionally, GACO 46-5-214 requires telecommunications companies to provide notice to Georgia residents immediately following discovery or notification of a breach of a telephone record concerning a Georgia resident if such breach is reasonably likely to cause quantifiable harm to the Georgia resident.

Jurisdiction

Georgia, Georgia

• Privacy