Weighing in on a conflict that has divided other states, the Georgia Supreme Court recently held that under Georgia law businesses do not have a duty to safeguard the personally identifiable information (PII) that they collect and store.
That holding in McConnell v. Georgia Department of Labor is a win for any business that may have to defend against a class action arising from a data breach, and also supports the argument made by many pro-business groups—and a diverse group of federal agencies, including the Federal Trade Commission—that Congress should enact comprehensive data privacy legislation that broadly preempts the ever-more complex patchwork of state data privacy laws.