US-GA v2.0 Sign in

US-GA (US-GA) · Module W3 · Derived Confidence: Probable

US-GA: Operational Resilience & Critical Infrastructure

#

Georgia has no standalone payments-specific operational-resilience statute analogous to DORA; resilience oversight flows through DBF's third-party service-provider examination authority over state-chartered banks/credit unions and federal FFIEC/BSA-linked cyber-incident reporting obligations. No GA-specific critical-third-party payments infrastructure regime was located beyond this bank-service-contract framework.

Standing sub-brief · as of 7 July 202695 words · last cycle 2026-07-05

Operational Resilience & Critical Infrastructure

Georgia has no standalone payments-specific operational-resilience statute comparable to the EU's DORA. Oversight instead runs through DBF's examination authority over third-party service providers to state-chartered banks and credit unions under O.C.G.A. §7-1-72, with deference to FFIEC-member-agency examinations on a 24-month lookback basis, and state-chartered credit unions carry a 72-hour cyber-incident notification requirement under 12 CFR Part 748.

Outlook

No Georgia-specific critical-third-party payments-infrastructure regime was identified beyond this bank-service-contract framework; resilience oversight for Georgia's payments sector remains a function of federal banking-agency examination cycles rather than a dedicated state payments-resilience rulebook.

no periodic updates on record for this sub-brief

Sources and findings (1 unique sources · R-3/R-4)
  1. [W3-E1] T1 Derived: Confirmed in_force Collapsed 3× useshttps://dbf.georgia.gov/document/document/2023-dbf-final-rulemaking-7-7-23-0/download re-verified

    Each third-party service provider entering a bank service contract with a state-chartered bank is subject to DBF examination and regulation as if it were a state financial institution, under O.C.G.A. § 7-1-72.