Ask Reggi Your Question Now
Can I use third-party cloud storage services that collect personal information in Georgia? What are the requirements?
Third-Party Cloud Storage Services in Georgia
Georgia law does not have specific requirements for the use of third-party cloud storage services that collect personal information. However, businesses should be aware of their obligations to provide notice in the event of a data breach affecting Georgia residents and should review the terms and conditions of any third-party cloud storage service they use to ensure compliance with applicable laws and regulations [1.1][2.1][3.1][6.1].
Under GARR Rule 80-4-1-.08, if a licensee provides notice under applicable federal or state law of an information security incident involving unauthorized access to personal information, then the licensee shall simultaneously provide a duplicate of such disclosure to the Department [2.1]. Pursuant to O.C.G.A. § 10-1-912, a business that satisfies the definition of an information broker is required to provide notice to Georgia residents in the event of a data breach that results in access or likely access to unencrypted personal information. In the event a licensee or an affiliate of a licensee is required to make such notification to Georgia residents, then a duplicate of the notification will simultaneously be submitted to the Department [2.1].
It is important to note that businesses should carefully review the terms and conditions of any third-party cloud storage service they use to ensure compliance with applicable laws and regulations.
Conclusion
Georgia law does not have specific requirements for the use of third-party cloud storage services that collect personal information. However, businesses should be aware of their obligations to provide notice in the event of a data breach affecting Georgia residents and should review the terms and conditions of any third-party cloud storage service they use to ensure compliance with applicable laws and regulations.
Source(s):
- [1.1] Notice of Unauthorized Access to Personal Information
- [2.1] Notice of Unauthorized Access to Personal Information
- [3.1] Notice of Unauthorized Access to Personal Information
- [6.1] Action in event of telephone record security breach; notification to Georgia residents; law enforcement exception; violations shall be unfair or deceptive practice in consumer transactions.
Jurisdiction
Georgia, Georgia