Runs an essential service, in Georgia

Cyber Attack Reporting by Utilities, O.C.G.A. s. 38-3-22.2(c) · Read the law's page

• This binds every utility, meaning any publicly, privately or cooperatively owned line, facility or system for producing, transmitting or distributing power, electricity, light, heat or gas (reached by declaring that you operate an essential service) (O.C.G.A. 38-3-22.2(a)(2)).
• Report to the director of emergency management and homeland security, or the director's designee, any cyber attack incident, data breach or identified use of malware on a utility computer or network, as that information is required to be reported to the United States government or any agency of it (O.C.G.A. 38-3-22.2(c)).
• Within two hours of making that federal report, provide substantially the same information to the director or the director's designee (O.C.G.A. 38-3-22.2(c)).
• Where federal law, rule or regulation prohibits the information from being disseminated, provide it to the director when the prohibition expires or is lifted (O.C.G.A. 38-3-22.2(c)).
• Notify any person impacted by the incident wherever other law, including Article 34 of Chapter 1 of Title 10, requires it, because this Code section does not relieve you of that duty (O.C.G.A. 38-3-22.2(e)).