Lege Trend. Anatomy of a Strict Data Breach Notification State Bill.

• 30 days to provide notification to consumers
• Greater disclosures to consumers about data collected and where it is stored
• Free credit freezes and unfreezes for a year
• 4 years of credit monitoring- free
• Applies Deceptive Trade Practices Act penalties to Businesses (these accrue daily and per incident)

Who is backing this bill: North Carolina  State Attorney General 

What impact does this have to businesses?

• healthcare comapnies would see their notifcation timeline cut from 60 days to 30 days

Have other states shortened notification timelines? Yes, in 2018 Colorado also went to 30 days. Iowa went to 45 days.

Health IT Security | North Carolina Reintroduces Strict Data Breach Notification Law