Senate Bill 1017
North Carolina General Statute: § 75-65
Effective Date: October 1, 2009
Definition of Personal Information: A person’s first name or first initial and last name in combination with any of the following identifying information:
(a) Social security number or employer taxpayer identification numbers;
(b) Driver’s license, State identification card, or passport numbers;
(c) Checking account numbers;
(d) Savings account numbers;
(e) Credit card numbers;
(f) Debit card numbers;
(g) Personal Identification (PIN) Code;
(h) Electronic identification numbers, electronic mail names or addresses, Internet account numbers, or Internet identification names;
(i) Digital signatures;
(j) Any other numbers or information that can be used to access a person's financial resources;
(k) Biometric data;
(l) Fingerprints;
(m) Passwords; or
(n) Parent's legal surname prior to marriage.
Summary: Any business that owns or licenses personal information of residents of North Carolina or any business that conducts business in North Carolina that owns or licenses personal information in any form (whether computerized, paper, or otherwise) shall provide notice to the affected person that there has been a security breach following discovery or notification of the breach. The disclosure notification shall be made without unreasonable delay, consistent with the legitimate needs of law enforcement and consistent with any measures necessary to determine sufficient contact information, determine the scope of the breach and restore the reasonable integrity, security, and confidentiality of the data system.
Visit the state Web site