Georgia House Bill HB886

Georgia 2025-2026 Regular Session

• Introduced: 3/31/25

Caption

State government; prohibit state agencies and local government entities from responding to ransomware activity

Summary

HB 886 would add a new Code section to Georgia law governing state government to address ransomware incidents affecting public entities. The bill defines “state agency,” “local government entity,” and “ransomware activity,” and then prohibits those entities from submitting payment to, or otherwise communicating with, a person or organization carrying out ransomware activity against them. In practical terms, the bill bars public agencies from negotiating with or paying ransomware actors. The bill also requires any affected state agency or local government entity to immediately consult with the Georgia Technology Authority if it experiences ransomware activity. The Georgia Technology Authority would be responsible for providing guidance and coordinating the response, and the affected entity would have to provide any information needed to support that response. The measure applies broadly to state-level bodies and local governments, including counties, municipalities, school districts, authorities, law enforcement agencies, and public universities and technical colleges.

Impact

HB 886 would change Georgia’s state-government cybersecurity response rules by centralizing ransomware incident coordination with the Georgia Technology Authority and prohibiting public entities from paying or communicating with ransomware attackers. It would affect a wide range of state and local public bodies, including schools, universities, law enforcement agencies, and other governmental units, and would create a mandatory reporting/consultation framework for ransomware incidents. The bill would also override conflicting laws to the extent they are inconsistent with its provisions.

Sentiment

Based on the bill text and the absence of recorded committee debate or votes in the provided materials, the overall sentiment appears to be preventive and security-focused, with the bill framed as a strong anti-ransomware measure for government systems. The sponsors’ approach suggests concern about discouraging ransom payments and improving coordinated incident response. Because no transcripts or vote history are included, there is no documented opposition or support to assess from the available record.

Contention

The main potential point of contention is the bill’s categorical ban on payment or communication with ransomware actors, which could be viewed as limiting flexibility for agencies facing urgent service disruptions or data recovery needs. Another possible issue is the requirement that affected entities immediately consult with the Georgia Technology Authority and provide all requested information, which may raise questions about operational control, reporting burdens, and how much authority the GTA would have in directing responses. No specific objections or supporters are identified in the provided discussion materials.