What does Georgia's Personal Identity Protection Act require after a breach?

Quick answer: It requires notice to affected Georgia residents in the most expedient time possible and without unreasonable delay once a breach is confirmed (O.C.G.A. Sec. 10-1-910 et seq.). A breach affecting 10,000 or more Georgia residents also requires notice to the Georgia Attorney General.