Personal Privacy Protection Act

1. **ONE-SENTENCE SUMMARY:** The Personal Privacy Protection Act in North Carolina establishes new privacy rights for consumers and obligations for businesses regarding the handling of personal data. 2. **KEY REQUIREMENTS:** - Inform consumers about what personal data you collect and how it is used. - Allow consumers to access, correct, and delete their personal data. - Implement reasonable security measures to protect personal data. - Provide a clear privacy policy on your website or in your business communications. 3. **DEADLINES:** - The law goes into effect on **January 1, 2024**. - Businesses must be fully compliant by this date. 4. **PENALTIES:** - Non-compliance can result in fines up to **$7,500 per violation**. - Consumers can file complaints, and the state can enforce penalties. 5. **SMB IMPACT:** Small businesses will need to update their data handling practices and privacy policies to comply with this law, which may require additional resources or training to ensure compliance. Failure to do so could lead to significant fines and damage to their reputation.