GeorgiaAI regulation

Regulation Status

• Georgia has not enacted a comprehensive AI statute, legislating instead through targeted criminal, insurance, and online-safety measures. Ga. Code § 16-11-90 brings falsely created videographic or still images within the prohibition on non-consensual nude or sexually explicit electronic transmissions, and SB 466 clarifies that claiming child sexual abuse material was adapted or modified to appear as an identifiable minor is not a defense to existing CSAM laws.
• Georgia has adopted two significant AI-specific measures in health insurance and online safety. SB 444 permits private review agents and utilization review entities to use AI to automate tasks, reduce administrative burdens, participate in decision-making, and perform other lawful functions, provided the tools are part of a legally compliant utilization review plan and do not issue an adverse determination until a qualifying natural person or utilization review entity conducts a utilization review in which a clinical peer participates.
• SB 540 regulates companion chatbots by requiring clear disclosure that the user is interacting with AI at the start of each session and at least every three hours, a protocol for detecting and addressing severe harm or related emotional crises, commercially reasonable age assurance when generating sexually explicit synthetic content, and prohibitions on falsely representing professional mental-health, behavioral-health, medical, or counseling authorization. For known or reasonably identifiable minors, it requires hourly AI disclosures and additional safeguards against sexual content, simulated romantic or sexual relationships, secrecy or isolation, and self-harm encouragement.
• Georgia's enforcement mix ranges from existing criminal penalties for the CSAM and intimate-image amendments to existing penalties for private review and utilization review standards, plus a civil penalty of up to $10,000 per violation under the SB 540 chatbot regime. The state has no omnibus developer or deployer risk-classification framework comparable to Colorado's.
• Executive and agency developments: AI Responsible Use Standard SS-23-002: effective version: Sets requirements for responsible agency AI use and reporting, review of generated outputs, and safeguards for sensitive information. External providers must disclose testing, accept review of ethical and legal implications, and provide plans for ongoing monitoring and maintenance. The source gives December 1, 2024 as the effective date.