---
title: O.C.G.A. § 31-53-49. Annual report.
collection: code
id: 31-53-49
cite_as: O.C.G.A. § 31-53-49 (2025)
canonical_url: https://georgiacommons.org/code/31-53-49
md_url: https://georgiacommons.org/code/31-53-49.md
text_url: https://georgiacommons.org/code/31-53-49/text
source_url: https://www.legis.ga.gov/api/document/docs/default-source/joint-features-document-library/t31-(v23)-2025-pdf.pdf?sfvrsn=da7ded69_0#page=1115
date: 2025
status: active
corpus_version: 2025-supplement-89aa39ab3c68
license: CC0-1.0
publisher: Georgia Commons, an independent project of Georgia Civic Data. Not the State of Georgia. Not legal advice.
up: https://georgiacommons.org/code/31-53.md
previous: https://georgiacommons.org/code/31-53-48.md
next: https://georgiacommons.org/code/31-53-50.md
index: https://georgiacommons.org/code/index.md
version: the only printed version
in_force: true
current_through: Including Acts of the 2025 Session of the General Assembly of Georgia
heading_path: HEALTH / OFFICE OF HEALTH STRATEGY AND COORDINATION / GEORGIA ALL-PAYER CLAIMS DATABASE
---

# O.C.G.A. § 31-53-49. Annual report.

(a) The administrator shall prepare an annual report to include:

(1) Any policies established or revised pursuant to state and federal medical privacy laws, including the federal Health Insurance Portability and Accountability Act of 1996, P.L. 104-191, as amended;

(2) The number of requests for data and reports from the GAPCD, whether the request was submitted by a state agency or private entity, the purpose of the project, a list of the requests for which the administrator was advised that the release was consistent with rule and the federal Health Insurance Portability and Accountability Act of 1996, P.L. 104-191, as amended, and a list of the requests not recommended for release;

(3) For each request recommended, the administrator must provide the federal regulation pursuant to which the use or disclosure was recommended, and whether a data use agreement or limited data set data use agreement was executed for the use or disclosure;

(4) A description of any data breaches, actions taken to provide notifications, if applicable, and actions taken to prevent a recurrence;

(5) The uses of the data in the GAPCD;

(6) Public studies produced by the administrator;

(7) The cost of administering the GAPCD, the sources of the funding, and the total revenue taken in by the GAPCD;

(8) The recipients of the data, the purposes of the data requests, and whether a fee was charged for the data; and

(9) A fee schedule displaying the fees for providing custom data reports from the GAPCD.

(b) Such annual report for the previous calendar year shall be provided no later than March 1 to the Governor, Lieutenant Governor, the Speaker of the House of Representatives, the chairperson of the House Committee on Health and Human Services, and the chairperson of the Senate Health and Human Services Committee.

## History

Code 1981, § 31-53-49, enacted by Ga. L. 2020, p. 743, § 1/SB 482.

## Law Reviews

For article, “Privacy for Student-Patients: A Call to Action,” see 73 Emory L.J. 83 (2023).

## U.s. Code.

The federal Health Insurance Portability and Accountability Act of 1996, referred to in this Code section, is codified at 42 U.S.C. § 1320d et seq.