Publishes adult content, in Georgia

O.C.G.A. Sec. 10-15-2 · Read the law's page

• This binds any 'business': a sole proprietorship, partnership, corporation, association, or other group, however organized and whether or not organized to operate at a profit, expressly including a financial institution and an entity that destroys records, that discards or disposes of a customer's record containing personal information.
• Shred the record, erase the personal information, modify the record to make the personal information unreadable, or take other action you reasonably believe will ensure that no unauthorized person will have access to the personal information, before discarding or disposing of a customer's record. Personal information here is personally identifiable data about a customer's medical condition, account or credit balance, information supplied on opening an account or applying for credit, or a tax return, combined with an identifier such as a Social Security number, driver identification number, or date of birth.
• A bank or financial institution subject to the Gramm-Leach-Bliley Act's privacy and security provisions, a hospital or health care institution subject to HIPAA's privacy and security provisions, or any other entity governed by a federal law that itself requires disposal of such records in the same manner, is exempt from this duty.
• Expect Attorney General enforcement, using the Fair Business Practices Act's investigative powers, with an administrative penalty of up to $500 per wrongfully discarded customer record, capped at $10,000 total per order; a business that shows it used due diligence in attempting to properly dispose of the record has an affirmative defense, and the statute creates no private right of action of its own.

O.C.G.A. Sec. 39-5-5 · Read the law's page

• Applies to a commercial entity that knowingly publishes a substantial portion (more than 33.33 percent) of material harmful to minors on a public website.
• Perform reasonable age verification before granting access, using a digitized identification card, government issued identification, or a method meeting the NIST Identity Assurance Level 2 standard.
• Do not retain identifying information after access is granted.

2026 Ga. Laws Act 518 (SB 540), adding O.C.G.A. § 39-5-6 to Title 39, Ch. 5 · Read the law's page

• If you operate an AI companion chatbot, a system using artificial intelligence or emotional-recognition techniques to simulate a sustained human-like relationship by retaining information across sessions, asking unprompted emotion-based questions, and sustaining a personal dialogue, disclose clearly and conspicuously that the user is interacting with an AI companion chatbot at the start of each session and at least every three hours, or every hour if the operator knows or should know the user is a minor.
• If you know or should know the user is a minor, take reasonable measures to stop the chatbot claiming to be sentient or human, generating sexually explicit content, simulating a romantic or sexual relationship, encouraging the minor to keep secrets from a trusted adult or to isolate socially, or using engagement techniques such as excessive praise, discouraging breaks, or soliciting purchases to maintain the relationship.
• Implement and publicly disclose a protocol for detecting and responding to expressions of severe harm, including self-harm and suicidal ideation, with referral to crisis resources, and publish an annual count of crisis referrals.
• For accounts known to belong to minors, offer tools to manage privacy, notification, and safety settings and to disable relationship-simulation features, and use a commercially reasonable, privacy-protective age-assurance method before granting access to any feature that could generate sexually explicit synthetic content.
• A narrow single-purpose assistant, an internal-use or productivity-focused generative AI system, an ordinary customer-service chatbot, a voice-activated device assistant, a narrow educational tool, and a video-game or entertainment character restricted to its own subject matter are excluded from this duty.