This legislation requires law enforcement agencies to destroy all data captured by automatic license plate readers after one year. This bill also makes it clear that license plate reader data is not subject to open records disclosure.

This legislation allows farmers who are 16 years of age or older to drive all terrain vehicles and personal transportation vehicles (i.e., motorized vehicles with three or more wheels that can travel up to 20 miles per hour) on public roads to transport agricultural products, livestock, farm machinery or supplies to or from a farm. They may also be used on public roads to transport farmers who are 16 years old or older from their residence to the farm where they work. Cities may prohibit or limit the use of such vehicles on public roads within the city if it is determined that the use of the vehicles endangers the safety of the traveling public, however counties do not have the ability to limit use in unincorporated areas. 

 This legislation allows driverless vehicles to operate in Georgia. 

This legislation requires law enforcement agencies to include the fine revenue received from speeding tickets over 20 miles per hour above the speed limit when calculating total speeding fine revenue for the department. Currently the total revenue from speeding fines under 17 miles per hour cannot be more than 40 percent of the overall budget, this legislation changes that ratio to 35 percent. This bill requires counties and municipalities to include in a separate section all speeding fine revenue in the annual report submitted to the Department of Community Affairs

This legislation requires local governments to comply with the Georgia Personal Data Security Act. Because counties maintain electronic and physical copies of personal information, they must provide individuals with notice of any breach of security of the system that houses the personal information as soon as possible after the breach is discovered, but in no case later than 45 days. If the county uses a third party to store the personal information, the third party must notify the county within 72 hours of any data breach, so that the county can meet its notification requirements. If law enforcement determines that notification would impair an ongoing criminal investigation, notification can be delayed. If the county, after investigation and consultation with relevant federal, state or local law enforcement, determines that the breach was not likely to result in identify theft or financial harm to an individual, notification will not be necessary. The county will be required to provide a written certification within 30 days to the attorney general and to maintain a copy of the written certification for at least five years.