This bill, titled the North Carolina Consumer Privacy Act, establishes new rules to protect the personal data of individuals living in the state. It directly affects businesses that collect consumer information, requiring them to define specific terms like "personal data" and "consent" to ensure users understand how their information is used. Key provisions mandate that companies obtain clear, voluntary agreement from consumers before processing their data and set standards for handling sensitive information such as biometrics. The legislation also creates a new chapter in state law to oversee these requirements and appropriates funds to support the enforcement of these privacy protections.
This House resolution encourages Congress to allow states like North Carolina to regulate artificial intelligence for consumer protection purposes. It asserts that state governments should retain the authority to investigate and enforce laws against unfair or deceptive practices involving AI systems. The bill opposes any federal restrictions that would prevent states from applying their existing consumer protection rules to new technologies. Ultimately, it aims to ensure that local laws remain effective in addressing commercial abuses regardless of whether artificial intelligence is used.
This bill establishes a new licensing framework in North Carolina for artificial intelligence chatbots that handle health information, requiring operators to obtain permission from the Department of Justice before offering such services. To qualify for a license, companies must submit detailed technical documentation, prove insurance coverage, and demonstrate that their systems meet rigorous safety and efficacy standards through independent testing and expert review. Once licensed, operators are required to implement strong data security measures, report breaches within 24 hours, provide clear disclosures about the chatbot's artificial nature, and allow users to access or delete their personal data. The state's Department of Justice will enforce these rules by conducting regular physical and digital inspections of chatbot systems, including reviews of source code and data practices.
This North Carolina legislation prohibits businesses from using personal data to set individualized prices for essential goods and services such as food, water, and hygiene products. The law defines the banned practice as using automated systems to collect information like browsing history or income to vary prices for different customers within the same day. Exceptions are allowed for loyalty discounts, shipping costs, and group-specific rates for categories like seniors or military personnel. Violations will be treated as unfair trade practices, and state funding has been allocated to support enforcement and public education beginning in October 2026.
This North Carolina bill creates a joint program for the Department of Environmental Quality and the Environmental Management Commission to use artificial intelligence tools when drafting and reviewing environmental permits. While the law encourages using AI to speed up routine tasks, it requires human staff to independently review and modify any AI-generated work before finalizing a permit decision. The legislation mandates transparency by requiring the department to publish details about the AI systems used and to inform applicants when AI assists in their permit processing. Additionally, the bill sets specific rules for data security and prohibits using applicant information to train third-party AI models without state authorization.
SB 757, the North Carolina Consumer Privacy Act, gives residents the right to access, correct, or delete personal data collected by businesses operating in the state. It requires businesses to stop processing data when consumers request it, with key exceptions for health information (covered under existing health privacy rules) and publicly available data. The law applies to businesses that collect personal data about North Carolina residents, defining "personal data" as information that can identify an individual (like name or online activity), while excluding health data processed under healthcare laws. Enforcement would be handled by the North Carolina Department of Justice’s Consumer Protection Division, with specific rules for how businesses must handle consumer requests. The bill is currently under review by the Senate Rules committee.
HB 916 strengthens North Carolina's Do Not Call and Do Not Text Registry by requiring telemarketers to remove registered numbers from their contact lists within 30 business days when a resident requests no further calls, reducing the previous timeframe from 60 days. It directly affects North Carolina residents who have registered their phone numbers and telemarketers operating in the state, including partner companies. Key provisions include clarifying that "telephone solicitation" covers text messages and automated calls, and holding companies jointly liable if they accept sales leads generated by illegal telemarketing calls. The bill updates state law to align with federal telemarketing rules and enforce stricter compliance.
SB 514, the "Social Media Algorithmic Control in Information Technology Act," requires social media platforms with over 1 million monthly U.S. users to obtain clear, separate consent from North Carolina minors (under 18) before using their personal data for advertising or algorithmic recommendations. The bill mandates accessible opt-in mechanisms - replacing default settings - to let users control how their data is processed, while banning the use of minors' data for targeted ads or content algorithms. It defines prohibited data uses broadly to include browsing history, location, and biometric information, and designates violations as unfair business practices under North Carolina law. The law directly affects major social media platforms operating in North Carolina, imposing new data privacy obligations without specifying enforcement details.
HB 462, titled the "Personal Data Privacy/Social Media Safety Act," aims to protect North Carolinians by enacting two main components: the Personal Data Privacy Act and the Social Media Safety Act. The provided text details the "North Carolina Personal Data Privacy Act," which is set to take effect on January 1, 2026. This act establishes definitions for key terms such as "personal data," "biometric data," "precise geolocation data," and "consent," affecting North Carolina residents as "consumers" and entities that process their data as "controllers." It also outlines the framework for consumer rights regarding their personal data.
HB 301, titled "Social Media Protections for Minors Under 16," aims to regulate social media platforms for minors in North Carolina. The bill prohibits social media platforms from allowing children under 14 years of age to create accounts and requires them to terminate existing accounts for this age group, deleting their personal data. For minors aged 14 or 15, platforms must obtain parental or guardian consent before they can create or maintain an account. The North Carolina Department of Justice is responsible for enforcing these provisions, which allows for civil penalties and damages for violations, including potential lawsuits by affected minors.
