Georgia Witness Protection: New Rules for 2026

Listen to this article · 10 min listen

Keeping sensitive information out of the wrong hands is a constant fight in Georgia’s public sector, especially when it involves people in legal proceedings. A huge change is coming down the pike with amendments to the Georgia Open Records Act, O.C.G.A. § 50-18-70 et seq., that completely alter how de-identification law works for witness protection in GA. This update, kicking in on January 1, 2026, tries to balance public access with protecting people’s safety, particularly in messy accident litigation and criminal cases where a witness’s identity could put them in danger.

Key Takeaways

  • The Georgia Open Records Act gets a major update on January 1, 2026, demanding tougher de-identification for records with witness info in certain court cases.
  • If a judge issues a witness protection order, public agencies will have to scrub identifying details, names, addresses, even unique biometric data, from records before releasing them.
  • Agencies that don’t comply with the new de-identification rules face penalties, starting with fines up to $1,000 for the first screw-up and the risk of being forced into compliance by a court.
  • As a lawyer, you need to get your firm’s record retention and disclosure policies updated by the end of 2025 to stay compliant with the new O.C.G.A. § 50-18-72.
  • If you’re trying to protect a witness in an accident case or other civil matter, you now have to specifically ask the court for a de-identification order under the changed O.C.G.A. § 50-18-72(b)(2).
Petition the Court
Your attorney petitions for witness protection and a de-identification order.
Judge’s Review
The court decides if disclosure would put the witness at substantial risk.
Order Issued
The court grants the order to protect the witness and de-identify records.
Agency Compliance (Jan 1, 2026)
Public agencies must redact identifying info from records before disclosure.
Enforcement
Failure means fines up to $1,000 and possible court-ordered action.

Understanding the New De-identification Mandates in O.C.G.A. § 50-18-72

The Georgia General Assembly really changed the game with House Bill 101, zeroing in on O.C.G.A. § 50-18-72 and public disclosure exemptions. The old statute gave agencies a ton of discretion on redactions, which was a mess. The 2026 amendments give us a much clearer, more prescriptive framework, especially for info that could risk a witness’s safety. Specifically, O.C.G.A. § 50-18-72(b)(2) now says that records identifying a witness in any case where a court has ordered witness protection are exempt from disclosure. This isn’t automatic, though. You need a judge to agree that releasing the info creates a substantial risk of harm to the witness or their family. The whole point was to give agencies clearer directions to cut down on the ambiguity that kept landing everyone in court. I’ve seen firsthand how the old vagueness created scary situations and pointless delays for people who were just trying to do the right thing.

The definition of “identifying information” is much wider now. It’s not just names and addresses. It includes unique biometric data, where someone works, or any specific location details (besides a city or county) that could realistically point to a protected witness. This means that if your witness lives on Elm Street in Decatur, just redacting their name isn’t good enough if other details in the report make it obvious where they live. Agencies like the Georgia Department of Public Safety or the Atlanta Police Department have to get more sophisticated with their redaction. They have to do more than just black out a name and call it a day.

Who is Affected by These Changes?

These changes hit a lot of people. Public agencies are on the front line. This means every state and local government body that has records with witness info, police departments, D.A. offices, sheriff’s offices, and even regulatory bodies like the Georgia Environmental Protection Division, will have to overhaul their records management. For example, the State Board of Workers’ Compensation might have a case where a witness needs protection from threats tied to their testimony. Those records now fall under this new, tighter scrutiny.

Attorneys in Georgia, especially those of us in criminal defense, personal injury, and workers’ comp, have to change our tactics. When you’re in accident litigation and need to protect a witness, getting that protective order now has a direct effect on how the case’s public records are handled. It’s about protecting the person, not just their testimony, by making sure the paper trail doesn’t expose them. We’ve already started telling clients that we need to explicitly ask for de-identification orders in any witness protection motion we file in Superior Courts, whether it’s in Fulton County or all the way down in Chatham County.

And of course, this directly affects anyone who is a witness. The changes provide better protection, which should encourage more people to step up with information without fearing payback. But it also means their lawyer has to be on the ball and get the right court orders in place to make these de-identification rules kick in. A witness to a bad wreck on I-75 near the I-285 interchange might see something critical but stay silent if they think their name and address will be plastered all over public records. This law is designed to fix that.

Concrete Steps for Compliance and Protection

For public agencies, job one is a top-to-bottom review of your public records request policies. You need to figure out exactly how you identify, redact, and release records with witness information. Training for your records staff and lawyers is a must. The Georgia Attorney General’s Office says it will put out new guidance by late 2025, but you can’t afford to wait. You should be looking at new redaction software or, at a minimum, setting up clear manual protocols right now. You’ll also need an internal checklist for verifying a court’s witness protection order before you start redacting.

For us legal practitioners, the next steps are just as clear. When you ask a court to protect a witness, you must petition for an order that directs all public agencies to de-identify that person’s information in any related public records. This should become a standard part of any protective order motion. For instance, if you’re filing a motion for a protective order under O.C.G.A. § 9-11-26(c) in Gwinnett County State Court, you should add specific language citing O.C.G.A. § 50-18-72(b)(2) and requesting the de-identification. This proactive approach is essential. Assuming a general protective order will cover public records is a dangerous mistake to make under this new law.

Also, make sure you explain to your witness clients what protections you’re seeking and why they are important. Being transparent builds trust and helps with cooperation. And keep a perfect record of all court orders for witness protection and de-identification. You’ll need that paper trail if a dispute over a records request ever pops up. I always tell my team: document everything, especially when someone’s safety is on the line.

Penalties for Non-Compliance and Enforcement

The updated Georgia Open Records Act also puts real penalties in place for violations, including the failure to protect witness information. O.C.G.A. § 50-18-73 lays it all out. An agency that knowingly and willfully ignores the new de-identification mandates can be hit with civil penalties. The first time, it’s a fine of up to $1,000. Subsequent violations can cost up to $2,500 each. These are per-violation fines, so an agency that repeatedly fails to redact information from multiple records could be looking at a serious bill. It’s a real financial incentive to get it right.

Money aside, anyone harmed by an improper disclosure of witness information can go to the Superior Court and get an injunction to force an agency to comply. A judge could order the agency to stop releasing records or to implement new redaction methods immediately. In really bad cases, an agency official who keeps ignoring court orders could even face contempt charges. So while the law targets the agency, individual officials who thumb their nose at a judge’s witness protection order are putting themselves in legal jeopardy. The legislature wants these rules to be effective, and I fully expect we’ll see more open records lawsuits in 2026, especially in cases where witness safety is a factor.

The January 1, 2026, effective date gives everyone a window to get their act together. But these systems are complex and the consequences for getting it wrong are steep, so you need to start preparing now. Waiting for a public records request to land on your desk in a case with a protected witness is just too late.

This change to Georgia’s Open Records Act is a fundamental shift in how we shield people who participate in our justice system. Legal pros and public agencies have to get their policies aligned with O.C.G.A. § 50-18-72 by January 1, 2026, to ensure that when a court issues a protection order, the witness’s sensitive information is actually protected. This isn’t just about shuffling papers differently.

Think about the real-world effects on cases involving Georgia’s distracted driving law. A witness who saw someone texting before a crash will be much more willing to testify if they know their personal info won’t become public knowledge. The same goes for cases involving the risks of gig work rental car accidents. Protecting a witness who saw a violation is key. The new rules are built to address these exact fears and get more people to cooperate with courts and law enforcement.

What Georgia statute covers witness protection de-identification?

The main statute is O.C.G.A. § 50-18-72(b)(2). This amended section creates the public disclosure exemption for records that identify a protected witness.

When do the new de-identification rules start in Georgia?

The new rules and mandates from the amendments to O.C.G.A. § 50-18-72 went into effect on January 1, 2026.

What information has to be de-identified?

The law now covers a broad range of “identifying information,” including names, addresses, unique biometric data, employer details, and any specific geographic data that could out a protected witness.

Is a court order required for de-identification?

Yes, absolutely. The de-identification protection under O.C.G.A. § 50-18-72(b)(2) is not automatic. You must get a specific court order for witness protection that directs agencies to redact identifying information from public records.

What are the penalties if a Georgia agency doesn’t comply?

An agency that knowingly and willfully violates the law can be fined up to $1,000 for a first offense and $2,500 for later ones. A court can also issue an injunction to force compliance.

Editorial Team

The Editorial Team at Car Accident Savannah is a group of writers and editors who cover personal injury and workplace law in Georgia. They research each story and publish under a shared desk byline — experts in their fields, working as one team.