Consumer Privacy Act

1. **ONE-SENTENCE SUMMARY:** The Consumer Privacy Act in North Carolina aims to enhance consumer privacy rights and impose new obligations on businesses regarding the handling of personal data. 2. **KEY REQUIREMENTS:** - Inform consumers about what personal data is collected and how it is used. - Allow consumers to access, correct, and delete their personal data. - Obtain explicit consent from consumers before collecting sensitive personal information. - Implement reasonable security measures to protect personal data. 3. **DEADLINES:** - Effective Date: The bill will take effect on January 1, 2025. - Compliance Deadline: Businesses must be compliant by the effective date. 4. **PENALTIES:** - Fines of up to $7,500 per violation. - Consumers may also bring lawsuits for violations, leading to potential additional damages. 5. **SMB IMPACT:** Small businesses will need to update their data handling practices and privacy policies to comply with the new requirements, which may involve additional costs and administrative work. However, these changes can also build consumer trust and loyalty.