The law exempts "[c]ybersecurity active defense measures that are designed to prevent or detect unauthorized computer access".[1] I'm not sure exactly what tha

The law exempts "[c]ybersecurity active defense measures that are designed to prevent or detect unauthorized computer access".[1] I'm not sure exactly what that means, but it sounds a little bit like the white-hat hacking EFF is talking about. Does this simply mean that security researchers must be invited to test a system that potentially is located in Georgia? [1] http://www.legis.ga.gov/legislation/en-US/Display/20172018/SB/315 http://www.legis.ga.gov/legislation/en-US/Display/20172018/S...