Can I share personal information about my customers with third parties in Georgia? What are the requirements?

Based on the documents provided, you cannot share personal information about your customers with third parties in Georgia without meeting certain requirements.

Information Security Safeguards for Consumer Financial Information

All licensees shall create and maintain an information security program to safeguard the nonpublic personal information of customers to the extent required by 16 C.F.R. Part 314 (the “Safeguards Rule”). ^{[1.2][2.2][3.2][4.2]}

Notice of Unauthorized Access to Personal Information

In the event that a licensee provides notice under applicable federal or state law of an information security incident involving unauthorized access to personal information, then the licensee shall simultaneously provide a duplicate of such disclosure to the Department. ^{[1.1][2.1][3.1][4.1]}

Notification to Georgia Residents

A business that satisfies the definition of an information broker is required to provide notice to Georgia residents in the event of a data breach that results in access or likely access to unencrypted personal information. In the event a licensee or an affiliate of a licensee is required to make such notification to Georgia residents, then a duplicate of the notification will simultaneously be submitted to the Department. ^{[1.1][2.1][3.1][4.1]}

Therefore, you can only share personal information about your customers with third parties in Georgia if you have created and maintained an information security program to safeguard the nonpublic personal information of customers to the extent required by 16 C.F.R. Part 314. Additionally, if there is a data breach that results in access or likely access to unencrypted personal information, you must provide notice to Georgia residents and submit a duplicate of the notification to the Department.

Source(s):

• [1.1] Notice of Unauthorized Access to Personal Information
• [2.1] Notice of Unauthorized Access to Personal Information
• [3.1] Notice of Unauthorized Access to Personal Information
• [4.1] Notice of Unauthorized Access to Personal Information
• [1.2] Information Security Safeguards for Consumer Financial Information
• [2.2] Information Security Safeguards for Consumer Financial Information
• [3.2] Information Security Safeguards for Consumer Financial Information
• [4.2] Information Security Safeguards for Consumer Financial Information

Jurisdiction

Georgia, Georgia

• Privacy