(a) Public disclosure shall not be required for records that are:

(1) Specifically required by the federal government to be kept confidential;

(2) Medical or veterinary records and similar files, the disclosure of which would be an invasion of personal privacy;

(3) Except as otherwise provided by law, records compiled for law enforcement or prosecution purposes to the extent that production of such records would disclose the identity of a confidential source, disclose confidential investigative or prosecution material which would endanger the life or physical safety of any person or persons, or disclose the existence of a confidential surveillance or investigation;

(4) Records of law enforcement, prosecution, or regulatory agencies in any pending investigation or prosecution of criminal or unlawful activity, other than initial police arrest reports and initial incident reports; provided, however, that an investigation or prosecution shall no longer be deemed to be pending when all direct litigation involving said investigation and prosecution has become final or otherwise terminated;

(4.1) Individual Georgia Uniform Motor Vehicle Accident Reports, except upon the submission of a written statement of need by the requesting party, such statement to be provided to the custodian of records and to set forth the need for the report pursuant to this Code section; provided, however, that any person or entity whose name or identifying information is contained in a Georgia Uniform Motor Vehicle Accident Report shall be entitled, either personally or through a lawyer or other representative, to receive a copy of such report; and provided, further, that Georgia Uniform Motor Vehicle Accident Reports shall not be available in bulk for inspection or copying by any person absent a written statement showing the need for each such report pursuant to the requirements of this Code section. For the purposes of this subsection, the term "need" means that the natural person or legal entity who is requesting in person or by representative to inspect or copy the Georgia Uniform Motor Vehicle Accident Report:

(A) Has a personal, professional, or business connection with a party to the accident;

(B) Owns or leases an interest in property allegedly or actually damaged in the accident;

(C) Was allegedly or actually injured by the accident;

(D) Was a witness to the accident;

(E) Is the actual or alleged insurer of a party to the accident or of property actually or allegedly damaged by the accident;

(F) Is a prosecutor or a publicly employed law enforcement officer;

(G) Is alleged to be liable to another party as a result of the accident;

(H) Is an attorney stating that he or she needs the requested reports as part of a criminal case, or an investigation of a potential claim involving contentions that a roadway, railroad crossing, or intersection is unsafe;

(I) Is gathering information as a representative of a news media organization; or

(J) Is conducting research in the public interest for such purposes as accident prevention, prevention of injuries or damages in accidents, determination of fault in an accident or accidents, or other similar purposes; provided, however, this subparagraph will apply only to accident reports on accidents that occurred more than 30 days prior to the request and which shall have the name, street address, telephone number and driver's license number redacted;

(5) Records that consist of confidential evaluations submitted to, or examinations prepared by, a governmental agency and prepared in connection with the appointment or hiring of a public officer or employee; and records consisting of material obtained in investigations related to the suspension, firing, or investigation of complaints against public officers or employees until ten days after the same has been presented to the agency or an officer for action or the investigation is otherwise concluded or terminated, provided that this paragraph shall not be interpreted to make such investigatory records privileged;

(6)(A) Real estate appraisals, engineering or feasibility estimates, or other records made for or by the state or a local agency relative to the acquisition of real property until such time as the property has been acquired or the proposed transaction has been terminated or abandoned; and

(B) Engineers' cost estimates and pending, rejected, or deferred bids or proposals until such time as the final award of the contract is made, or the project is terminated or abandoned. The provisions of this subparagraph shall apply whether the bid or proposal is received or prepared by the Department of Transportation pursuant to Article 4 of Chapter 2 of Title 32, by a county pursuant to Article 3 of Chapter 4 of Title 32, by a municipality pursuant to Article 4 of Chapter 4 of Title 32, or by a governmental entity pursuant to Article 2 of Chapter 91 of Title 36;

(7) Notwithstanding any other provision of this article, an agency shall not be required to release those portions of records which would identify persons applying for or under consideration for employment or appointment as executive head of an agency as that term is defined in paragraph (1) of subsection (a) of Code Section 50-14-1, or of a unit of the University System of Georgia; provided, however, that at least 14 calendar days prior to the meeting at which final action or vote is to be taken on the position, the agency shall release all documents which came into its possession with respect to as many as three persons under consideration whom the agency has determined to be the best qualified for the position and from among whom the agency intends to fill the position. Prior to the release of these documents, an agency may allow such a person to decline being considered further for the position rather than have documents pertaining to the person released. In that event, the agency shall release the documents of the next most qualified person under consideration who does not decline the position. If an agency has conducted its hiring or appointment process open to the public, it shall not be required to delay 14 days to take final action on the position. The agency shall not be required to release such records with respect to other applicants or persons under consideration, except at the request of any such person. Upon request, the hiring agency shall furnish the number of applicants and the composition of the list by such factors as race and sex. The agency shall not be allowed to avoid the provisions of this paragraph by the employment of a private person or agency to assist with the search or application process;

(8) Related to the provision of staff services to individual members of the General Assembly by the Legislative and Congressional Reapportionment Office, the Senate Research Office, or the House Research Office, provided that this exception shall not have any application with respect to records related to the provision of staff services to any committee or subcommittee or to any records which are or have been previously publicly disclosed by or pursuant to the direction of an individual member of the General Assembly;

(9) Records that are of historical research value which are given or sold to public archival institutions, public libraries, or libraries of a unit of the Board of Regents of the University System of Georgia when the owner or donor of such records wishes to place restrictions on access to the records. No restriction on access, however, may extend more than 75 years from the date of donation or sale. This exemption shall not apply to any records prepared in the course of the operation of state or local governments of the State of Georgia;

(10) Records that contain information from the Department of Natural Resources inventory and register relating to the location and character of a historic property or of historic properties as those terms are defined in Code Sections 12-3-50.1 and 12-3-50.2 if the Department of Natural Resources through its Division of Historic Preservation determines that disclosure will create a substantial risk of harm, theft, or destruction to the property or properties or the area or place where the property or properties are located;

(11) Records that contain site specific information regarding the occurrence of rare species of plants or animals or the location of sensitive natural habitats on public or private property if the Department of Natural Resources determines that disclosure will create a substantial risk of harm, theft, or destruction to the species or habitats or the area or place where the species or habitats are located; provided, however, that the owner or owners of private property upon which rare species of plants or animals occur or upon which sensitive natural habitats are located shall be entitled to such information pursuant to this article;

(11.1) An individual's social security number and insurance or medical information in personnel records, which may be redacted from such records; (11.2) Records that would reveal the names, home addresses, telephone numbers, security codes, or any other data or information developed, collected, or received by counties or municipalities in connection with the installation, servicing, maintaining, operating, selling, or leasing of burglar alarm systems, fire alarm systems, or other electronic security systems; provided, however, that initial police reports and initial incident reports shall remain subject to disclosure pursuant to paragraph (4) of this subsection;

(11.3)(A) An individual's social security number, mother's birth name, credit card information, debit card information, bank account information, financial data or information, and insurance or medical information in all records, and if technically feasible at reasonable cost, day and month of birth, which shall be redacted prior to disclosure of any record requested pursuant to this article; provided, however, that such information shall not be redacted from such records if the person or entity requesting such records requests such information in a writing signed under oath by such person or a person legally authorized to represent such entity which states that such person or entity is gathering information as a representative of a news media organization for use in connection with news gathering and reporting; and provided, further, that such access shall be limited to social security numbers and day and month of birth; and provided, further, that this news media organization exception for access to social security numbers and day and month of birth and the other protected information set forth in this subparagraph shall not apply to teachers and employees of a public school.

(B) This paragraph shall have no application to:

(i) The disclosure of information contained in the records or papers of any court or derived therefrom including without limitation records maintained pursuant to Article 9 of Title 11;

(ii) The disclosure of information to a court, prosecutor, or publicly employed law enforcement officer, or authorized agent thereof, seeking records in an official capacity;

(iii) The disclosure of information to a public employee of this state, its political subdivisions, or the United States who is obtaining such information for administrative purposes, in which case, subject to applicable laws of the United States, further access to such information shall continue to be subject to the provisions of this paragraph;

(iv) The disclosure of information as authorized by the order of a court of competent jurisdiction upon good cause shown to have access to any or all of such information upon such conditions as may be set forth in such order;

(v) The disclosure of information to the individual in respect of whom such information is maintained, with the authorization thereof, or to an authorized agent thereof; provided, however, that the agency maintaining such information shall require proper identification of such individual or such individual's agent, or proof of authorization, as determined by such agency;

(vi) The disclosure of the day and month of birth and mother's birth name of a deceased individual;

(vii) The disclosure by an agency of credit or payment information in connection with a request by a consumer reporting agency as that term is defined under the federal Fair Credit Reporting Act (15 U.S.C. 1681, et seq.);

(viii) The disclosure by an agency of information in its records in connection with the agency's discharging or fulfilling of its duties and responsibilities, including, but not limited to, the collection of debts owed to the agency or individuals or entities whom the agency assists in the collection of debts owed to the individual or entity; or

(ix) The disclosure of information necessary to comply with legal or regulatory requirements or for legitimate law enforcement purposes.

(C) Records and information disseminated pursuant to this paragraph may be used only by the authorized recipient and only for the authorized purpose. Any person who obtains records or information pursuant to the provisions of this paragraph and knowingly and willfully discloses, distributes, or sells such records or information to an unauthorized recipient or for an unauthorized purpose shall be guilty of a misdemeanor of a high and aggravated nature and upon conviction thereof shall be punished as provided in Code Section 17-10-4. Any person injured thereby shall have a cause of action for invasion of privacy. Any prosecution pursuant to this paragraph shall be in accordance with the procedure in subsection (b) of Code Section 50-18-74.

(D) In the event that the custodian of public records protected by this paragraph has good faith reason to believe that a pending request for such records has been made fraudulently, under false pretenses, or by means of false swearing, such custodian shall apply to the superior court of the county in which such records are maintained for a protective order limiting or prohibiting access to such records.

(E) This paragraph shall supplement and shall not supplant, overrule, replace, or otherwise modify or supersede any provision of statute, regulation, or law of the federal government or of this state as now or hereafter amended or enacted requiring, restricting, or prohibiting access to the information identified in subparagraph (A) of this paragraph and shall constitute only a regulation of the methods of such access where not otherwise provided for, restricted, or prohibited;

(12) Public records containing information that would disclose or might lead to the disclosure of any component in the process used to execute or adopt an electronic signature, if such disclosure would or might cause the electronic signature to cease being under the sole control of the person using it. For purposes of this paragraph, the term "electronic signature" has the same meaning as that term is defined in Code Section 10-12-3; (13) Records that would reveal the home address or telephone number, social security number, or insurance or medical information of law enforcement officers, judges, scientists employed by the Division of Forensic Sciences of the Georgia Bureau of Investigation, correctional employees, and prosecutors or identification of immediate family members or dependents thereof;

(13.1) Records that reveal the home address, the home telephone number, or the social security number of or insurance or medical information about teachers and employees of a public school. For the purposes of this paragraph, the term "public school" means any school which is conducted within this state and which is under the authority and supervision of a duly elected county or independent board of education; or

(14) Acquired by an agency for the purpose of establishing or implementing, or assisting in the establishment or implementation of, a carpooling or ridesharing program, to the extent such records would reveal the name, home address, employment address, home telephone number, employment telephone number, or hours of employment of any individual or would otherwise identify any individual who is participating in, or who has expressed an interest in participating in, any such program. As used in this paragraph, the term "carpooling or ridesharing program" means and includes, but is not limited to, the formation of carpools, vanpools, or buspools, the provision of transit routes, rideshare research, and the development of other demand management strategies such as variable working hours and telecommuting.

(b) This article shall not be applicable to:

(1) Any trade secrets obtained from a person or business entity which are of a privileged or confidential nature and required by law to be submitted to a government agency or to data, records, or information of a proprietary nature, produced or collected by or for faculty or staff of state institutions of higher learning, or other governmental agencies, in the conduct of or as a result of, study or research on commercial, scientific, technical, or scholarly issues, whether sponsored by the institution alone or in conjunction with a governmental body or private concern, where such data, records, or information has not been publicly released, published, copyrighted, or patented;

(2) Any data, records, or information developed, collected, or received by or on behalf of faculty, staff, employees, or students of an institution of higher education or any public or private entity supporting or participating in the activities of an institution of higher education in the conduct of, or as a result of, study or research on medical, scientific, technical, scholarly, or artistic issues, whether sponsored by the institution alone or in conjunction with a governmental body or private entity until such information is published, patented, otherwise publicly disseminated, or released to an agency whereupon the request must be made to the agency. This subsection applies to, but is not limited to, information provided by participants in research, research notes and data, discoveries, research projects, methodologies, protocols, and creative works; or (3) Unless otherwise provided by law, contract, bid, or proposal, records consisting of questions, scoring keys, and other materials, constituting a test that derives value from being unknown to the test taker prior to administration, which is to be administered by the State Board of Education, the Office of Education Accountability, or a local school system, if reasonable measures are taken by the owner of the test to protect security and confidentiality; provided, however, that the State Board of Education may establish procedures whereby a person may view, but not copy, such records if viewing will not, in the judgment of the board, affect the result of administration of such test.

These limitations shall not be interpreted by any court of law to include or otherwise exempt from inspection the records of any athletic association or other nonprofit entity promoting intercollegiate athletics.

(c)(1) All public records of hospital authorities shall be subject to this article except for those otherwise excepted by this article or any other provision of law.

(2) All state officers and employees shall have a privilege to refuse to disclose the identity or personally identifiable information of any person participating in research on commercial, scientific, technical, medical, scholarly, or artistic issues conducted by the Department of Human Resources or a state institution of higher education whether sponsored by the institution alone or in conjunction with a governmental body or private entity. Personally identifiable information shall mean any information which if disclosed might reasonably reveal the identity of such person including but not limited to the person's name, address, and social security number. The identity of such informant shall not be admissible in evidence in any court of the state unless the court finds that the identity of the informant already has been disclosed otherwise.

(d) This article shall not be applicable to any application submitted to or any permanent records maintained by a judge of the probate court pursuant to Code Section 16-11-129, relating to licenses to carry pistols or revolvers, or pursuant to any other requirement for maintaining records relative to the possession of firearms. This subsection shall not preclude law enforcement agencies from obtaining records relating to licensing and possession of firearms as provided by law.

(e) This article shall not be construed to repeal:

(1) The attorney-client privilege recognized by state law to the extent that a record pertains to the requesting or giving of legal advice or the disclosure of facts concerning or pertaining to pending or potential litigation, settlement, claims, administrative proceedings, or other judicial actions brought or to be brought by or against the agency or any officer or employee; provided, however, attorney-client information may be obtained in a proceeding under Code Section 50-18-73 to prove justification or lack thereof in refusing disclosure of documents under this Code section provided the judge of the court in which said proceeding is pending shall first determine by an in camera examination that such disclosure would be relevant on that issue; (2) The confidentiality of attorney work product; or

(3) State laws making certain tax matters confidential.

(f)(1) As used in this article, the term:

(A) "Computer program" means a set of instructions, statements, or related data that, in actual or modified form, is capable of causing a computer or computer system to perform specified functions.

(B) "Computer software" means one or more computer programs, existing in any form, or any associated operational procedures, manuals, or other documentation.

(2) This article shall not be applicable to any computer program or computer software used or maintained in the course of operation of a public office or agency.

(g) This Code section shall be interpreted narrowly so as to exclude from disclosure only that portion of a public record to which an exclusion is directly applicable. It shall be the duty of the agency having custody of a record to provide all other portions of a record for public inspection or copying.

(h) Within the three business days applicable to response to a request for access to records under this article, the public officer or agency having control of such record or records, if access to such record or records is denied in whole or in part, shall specify in writing the specific legal authority exempting such record or records from disclosure, by Code section, subsection, and paragraph. No addition to or amendment of such designation shall be permitted thereafter or in any proceeding to enforce the terms of this article; provided, however, that such designation may be amended or supplemented one time within five days of discovery of an error in such designation or within five days of the institution of an action to enforce this article, whichever is sooner; provided, further, that the right to amend or supplement based upon discovery of an error may be exercised on only one occasion. In the event that such designation includes provisions not relevant to the subject matter of the request, costs and reasonable attorney's fees may be awarded pursuant to Code Section 50-18-73.