How fast must a Georgia insurer respond to a cyber claim?
Under Georgia's claim-handling statute, O.C.G.A. Sec. 33-6-34, an insurer must acknowledge receipt of a claim, including a cyber liability insurance claim, within 15 days of receiving it. That acknowledgment does not mean the claim is approved or denied, only that the insurer confirms it has the claim and is working on it.
After acknowledgment, the statute requires the insurer to affirm or deny the claim within a reasonable time following completion of its investigation. Georgia law does not attach a fixed number of days to "reasonable time" for the investigation stage, since investigation length depends on the claim's complexity. A straightforward claim can be resolved faster than one requiring extensive forensic work. If the insurer denies the claim, in whole or in part, it must provide the reasons for the denial in writing.
Cyber claims often take longer to investigate than a typical property claim because of the technical work involved. A forensic IT investigator usually has to determine how an intrusion happened, what systems and data were touched, and whether the incident meets the definition of a covered event under the policy. For example, a Columbus manufacturing company reports a ransomware incident to its insurer. The insurer must acknowledge the claim within 15 days under O.C.G.A. Sec. 33-6-34, but the forensic investigation into how the attacker got in, what data was encrypted, and whether the ransom demand falls within the policy's ransomware sublimit can take several weeks before the insurer issues a coverage decision. The 15-day acknowledgment clock and the "reasonable time" decision clock are separate obligations under the statute.
Does cyber insurance cover ransomware and business interruption in Georgia? explains what a ransomware claim like the example above typically involves. How much does cyber liability insurance cost for a Georgia small business? covers pricing, and what does Georgia's Personal Identity Protection Act require after a breach? covers the separate notification clock that runs alongside a claim. The Georgia cyber liability insurance page has more on claim handling and policy structure, and a coverage review can walk through a specific policy's claims process and sublimits before an incident happens.
