Technology (Privacy)

SB 801 protects the personal information of North Carolina special operations personnel and their families by making their addresses, phone numbers, and school details confidential. The bill requires state agencies to keep this data private unless the individual requests disclosure and confirms they have taken steps to protect it through other means. It also expands the state's Address Confidentiality Program to include these individuals, allowing them to use a substitute address for receiving mail and legal documents. Additionally, the legislation creates a new civil liability law against doxing and allocates funds to implement these protections.

This bill, titled the North Carolina Consumer Privacy Act, establishes new rules to protect the personal data of individuals living in the state. It directly affects businesses that collect consumer information, requiring them to define specific terms like "personal data" and "consent" to ensure users understand how their information is used. Key provisions mandate that companies obtain clear, voluntary agreement from consumers before processing their data and set standards for handling sensitive information such as biometrics. The legislation also creates a new chapter in state law to oversee these requirements and appropriates funds to support the enforcement of these privacy protections.

This bill establishes strict privacy rules for immigration data held by North Carolina state agencies, limiting when such information can be shared with law enforcement or other government entities. Under the new law, state departments may only release immigration records if the individual provides consent or if a court issues a valid order, subpoena, or warrant. Additionally, the bill requires agencies to notify individuals within three business days when their data is requested and to submit annual reports detailing all such requests to the Attorney General. To support these changes, the legislation appropriates $1.5 million starting in the 2026-2027 fiscal year to fund necessary technology updates, staff training, and compliance reporting.