On 26 January 2021, the Georgia Computer Data Privacy Act (SB 394) was introduced in the Georgia Senate. The Act would allow businesses to collect personal information only after having provided notice and obtained the consumer’s affirmative and explicit consent. To sell data, the companies shall allow the consumers' to opt-out and provide notice including the persons to whom data will be sold and the pro-rata value of the consumer’s personal information. Also, the Act introduces the right to data deletion and the right to be forgotten. Moreover, research activities by corporations shall only be pursued with anonymised or aggregated data. Finally, consumers would have a private right of action against any person violating the Act.
Original source