title: US-GA — Operational Resilience & Critical Infrastructure (W3) | World Payments Monitor canonical: https://payments.gi/jurisdictions/united-states-georgia/w3/ ### W3 Operational Resilience & Critical Infra Probable re-verified 2026-10-18 · changed 2026-07-05 Georgia has no standalone payments-specific operational-resilience statute analogous to DORA; resilience oversight flows through DBF's third-party service-provider examination authority over state-chartered banks/credit unions and federal FFIEC/BSA-linked cyber-incident reporting obligations. No GA-specific critical-third-party payments infrastructure regime was located beyond this bank-service-contract framework. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open its jurisdiction pages on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/) Standing sub-brief · as of 7 July 2026 95 words · last cycle 2026-07-05 #### Operational Resilience & Critical Infrastructure Georgia has no standalone payments-specific operational-resilience statute comparable to the EU's DORA. Oversight instead runs through DBF's examination authority over third-party service providers to state-chartered banks and credit unions under O.C.G.A. §7-1-72, with deference to FFIEC-member-agency examinations on a 24-month lookback basis, and state-chartered credit unions carry a 72-hour cyber-incident notification requirement under 12 CFR Part 748. #### Outlook No Georgia-specific critical-third-party payments-infrastructure regime was identified beyond this bank-service-contract framework; resilience oversight for Georgia's payments sector remains a function of federal banking-agency examination cycles rather than a dedicated state payments-resilience rulebook. no periodic updates on record for this sub-brief ** Sources and findings (1 unique sources · R-3/R-4)** 1. [W3-E1] T1 Derived: Confirmed in_force [Collapsed 3× uses https://dbf.georgia.gov/document/document/2023-dbf-final-rulemaking-7-7-23-0/download](https://dbf.georgia.gov/document/document/2023-dbf-final-rulemaking-7-7-23-0/download) re-verified 2026-07-05 Each third-party service provider entering a bank service contract with a state-chartered bank is subject to DBF examination and regulation as if it were a state financial institution, under O.C.G.A. § 7-1-72.