In one paragraph
North Carolina's H 462 (Edition 2) would enact a Data Privacy Act giving residents rights to access, correct, delete and take their data and to opt out of targeted ads, sales and profiling for solely automated decisions with significant effects, and a social media act requiring parental consent and age verification for minors. Reported favorably as a committee substitute and re-referred to House Commerce and Economic Development April 29, 2025; it has not passed either house.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
If enacted, businesses meeting the data-volume thresholds would have to honor consumer opt-outs, including from automated-decision profiling, and large social media companies would have to verify ages and get parental consent.
Key provisions
- Chapter 75F would cover businesses that, in the prior year, handled data of at least 35,000 NC consumers, or at least 10,000 consumers while earning over 20% of gross revenue from selling data
- Consumers could opt out of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, as well as targeted advertising and sales of personal data
- Controllers handling data of at least 100,000 consumers would have to document data protection assessments for high-risk processing, including profiling that risks unfair treatment, disparate impact or injury
- Controllers would have 45 days to answer consumer requests (extendable by 45 days); the Department of Justice would enforce and could first issue a notice giving at least 60 days to cure where a cure is possible; there would be no private right of action
- Chapter 75G would bar social media companies from letting minors hold accounts without parent or guardian consent and require age verification through a commercial entity; it would not cover platforms of businesses with under $100 million in annual gross revenue
- A violation of the 75G consent rule would be a Class 1 misdemeanor, and a company violating the chapter would owe an individual $2,500 per violation plus fees
- As drafted, both chapters take effect January 1, 2026, and data protection assessments apply to processing activities created or generated on or after July 1, 2026
Latest legislative action
Apr 29, 2025. Re-ref Com On Commerce and Economic Development
Topics and industries
Related topics
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error