GeorgiaAI regulation

Regulation Status

• Georgia has not enacted a comprehensive AI statute, legislating instead through targeted criminal, insurance, and online-safety measures. Ga. Code § 16-11-90 brings falsely created videographic or still images within the prohibition on non-consensual nude or sexually explicit electronic transmissions, and SB 466 clarifies that claiming child sexual abuse material was adapted or modified to appear as an identifiable minor is not a defense to existing CSAM laws.
• Georgia has adopted two significant AI-specific measures in health insurance and online safety. SB 444 permits private review agents and utilization review entities to use AI to automate tasks, reduce administrative burdens, participate in decision-making, and perform other lawful functions, provided the tools are part of a legally compliant utilization review plan and do not issue an adverse determination until a qualifying natural person or utilization review entity conducts a utilization review in which a clinical peer participates.
• SB 540 regulates companion chatbots by requiring clear disclosure that the user is interacting with AI at the start of each session and at least every three hours, a protocol for detecting and addressing severe harm or related emotional crises, commercially reasonable age assurance when generating sexually explicit synthetic content, and prohibitions on falsely representing professional mental-health, behavioral-health, medical, or counseling authorization. For known or reasonably identifiable minors, it requires hourly AI disclosures and additional safeguards against sexual content, simulated romantic or sexual relationships, secrecy or isolation, and self-harm encouragement.
• Georgia's enforcement mix ranges from existing criminal penalties for the CSAM and intimate-image amendments to existing penalties for private review and utilization review standards, plus a civil penalty of up to $10,000 per violation under the SB 540 chatbot regime. The state has no omnibus developer or deployer risk-classification framework comparable to Colorado's.