9 Parts. North Carolina Data Security Bill. Post-Equifax.

The state Attorney General and a State Representative are promoting an forthcoming North Carolina bill, the Act to Strengthen Identity Theft Protections.

Here’s what the bill will do:

• Include ransomware in definition of data breach
• Protect more information by creating a duty for businesses to have reasonable data security standards, and include insurance/medical information in the data breach notification law
• Quicker consumer notification.  15 day time limit to notify the consumer & the Attorney General
• Free credit freezes & credit freeze lifts
• 3 free credit reports from each of the 3 credit reporting agencies
• 5 years of free credit monitoring if a credit reporting agency experiences a breach
• Penalties will follow the Deceptive Trade Practices Act  that makes each act a violation to which penalties can attach
• Require consent for credit reports
• Consumer right to all their information at a credit reporting service