This legislation requires health insurance plans to provide coverage for specialty, high cost drugs for rare and complex medical conditions at a copay of no more than $200 per month with a maximum out of pocket cost of $1,000 per insured and $2,000 per family per year.

This legislation prohibits fire insurance providers to rely solely on: 1) the Insurance Service Office (ISO) public protection classification system rating; 2) a rating system that does not take into consideration a rural community's fire department or service response time; 3) a rating system that bases the classification solely on the distance to the nearest fire department.

 This legislation transfers authority under the Fair Business Practices Act of 1975 from the Governor's Office of Consumer Affairs to the Attorney General. 

This legislation requires local governments to comply with the Georgia Personal Data Security Act. Because counties maintain electronic and physical copies of personal information, they must provide individuals with notice of any breach of security of the system that houses the personal information as soon as possible after the breach is discovered, but in no case later than 45 days. If the county uses a third party to store the personal information, the third party must notify the county within 72 hours of any data breach, so that the county can meet its notification requirements. If law enforcement determines that notification would impair an ongoing criminal investigation, notification can be delayed. If the county, after investigation and consultation with relevant federal, state or local law enforcement, determines that the breach was not likely to result in identify theft or financial harm to an individual, notification will not be necessary. The county will be required to provide a written certification within 30 days to the attorney general and to maintain a copy of the written certification for at least five years.

This legislation creates the Senate Data Security and Privacy Study Committee to examine the protection provided by existing resources and policies of the state and local governments to protect data and personal information of citizens stored on government networks.

This legislation creates the Consumer and Provider Protection Act Senate Study Committee.  The Committee will look at current practices and the necessity for the regulation of rental networks, current practices and necessity of all products clauses, incidence and prevalence of unilateral revisions in contracts with health care providers, and incidence and prevalence of incorrect data related to network adequacy.