From ClingantryAI Health Regulator News

Georgia's SB 444, effective January 1, 2027, draws a clean line: insurers may use AI in prior authorization to automate paperwork and reduce administrative burden — but an adverse decision (denying or reducing care) can't be issued until a qualified clinical peer has actually conducted the review and participated in the decision. The AI also can't override that clinician's judgment. If you operate in Georgia, nothing changes today, but this is worth having on your 2027 compliance calendar now.

Harbin Clinic, LLC, a healthcare provider in Georgia, reported a hacking/IT incident to HHS OCR on May 16, 2025. The breach affected 176,149 individuals after unauthorized access to a network server. This filing date is when the report was submitted to the government, not necessarily when the incident occurred. Healthcare administrators should monitor for similar threats to their own network servers and ensure their incident response plans are current. While this specific event involves a provider, the risk of server-based attacks applies to all entities handling protected health information. Review your own security logs and vendor contracts to confirm adequate protections are in place against unauthorized access.