This legislation allows driverless vehicles to operate in Georgia. 

This legislation requires local governments to comply with the Georgia Personal Data Security Act. Because counties maintain electronic and physical copies of personal information, they must provide individuals with notice of any breach of security of the system that houses the personal information as soon as possible after the breach is discovered, but in no case later than 45 days. If the county uses a third party to store the personal information, the third party must notify the county within 72 hours of any data breach, so that the county can meet its notification requirements. If law enforcement determines that notification would impair an ongoing criminal investigation, notification can be delayed. If the county, after investigation and consultation with relevant federal, state or local law enforcement, determines that the breach was not likely to result in identify theft or financial harm to an individual, notification will not be necessary. The county will be required to provide a written certification within 30 days to the attorney general and to maintain a copy of the written certification for at least five years.

This legislation creates the Georgia Unmanned Aircraft Systems Commission, a fifteen member commission that includes the appointment of one county commissioner. The Commission will study the use and benefits of drones in Georgia. SB 325 preempts any county attempt to regulate the use of drones.

This legislation creates the Senate Data Security and Privacy Study Committee to examine the protection provided by existing resources and policies of the state and local governments to protect data and personal information of citizens stored on government networks.