North Carolina has no comprehensive consumer privacy statute, so obligations there come from its breach-notification law, sector-specific rules and federal statutes. This page collects our coverage touching North Carolina. For the underlying law rather than the news, see our North Carolina privacy law page.
Genetic Privacy
November 9, 2026
North Carolina's genetic employment statute is one short section enacted in 1997. It forbids refusing employment or discharging someone because of requested genetic testing or counseling, or genetic information about the person or family. It reaches any public or private entity, but says nothing about remedies and does not regulate testing itself.
Read more →
Breach Notification
November 9, 2026
North Carolina's Identity Theft Protection Act does not limit its breach duty to computers: section 75-65 reaches personal information in any form. Every business that notifies a person also reports to the Attorney General's Consumer Protection Division, with no minimum count, and a violation is an unfair practice under G.S. 75-1.1, with private suits reserved for those injured.
Read more →
Data Security Rules
November 9, 2026
Article 2A of Chapter 75, the Identity Theft Protection Act, goes further than breach notice. Section 75-62 limits how a business may display, transmit, mail or sell Social Security numbers, section 75-64 sets rules for destroying records, and each section makes a violation a violation of G.S. 75-1.1. The two differ on private suits and on treble damages.
Read more →