Technology (Consumer Data Protection)

House Bill 81 requires insurance institutions and agents to obtain written consent from applicants and policyholders before collecting, receiving, selling, or using vehicle telematics data. The bill mandates that individuals be notified how their telematics data will be used and that they can revoke consent at any time. Insurers must provide a reasonable means for individuals to revoke consent, which must be actioned within 24 hours. A violation of these provisions would be considered an unfair trade practice, with the act becoming effective October 1, 2025.

HB 860, the Social Media Control in Information Technology Act, requires social media platforms with over 1 million U.S. monthly active users to stop using North Carolina minors' (under 18) personal data for advertising or algorithm-driven content recommendations. It mandates platforms to provide clear, easy-to-use privacy tools allowing users to control data sharing, with special opt-in consent required for minors' data. The bill prohibits "dark patterns" in consent processes and defines strict terms like "personal information" to cover data ranging from location to health details. Violations would be treated as unfair business practices under North Carolina law, with funds appropriated for enforcement. The law directly affects major social media platforms operating in North Carolina, focusing on protecting minors' data privacy rather than addressing broader social media use.

HB 819 creates North Carolina's Longitudinal Data System, which links student education data (like test scores, graduation records, and course enrollment) with workforce data (such as employment and wages) to track student outcomes. It directly affects public schools, universities, the Department of Public Instruction, and workforce agencies by requiring them to share de-identified student data through this centralized system. Key provisions include strict privacy safeguards (complying with FERPA and HIPAA), mandatory data security plans, a 5-year limit on linking education and workforce data, and annual reporting requirements for the system's oversight body. The bill aims to improve education policy decisions while ensuring data privacy and security for students.