HB 196 Summary

• Creates Office of Privacy and Data Protection within Department of Information Technology, headed by Chief Privacy Officer appointed by State CIO, to conduct annual privacy reviews, training, and coordinate data protection for state agencies and provide resources to local governments and the public.

• Establishes comprehensive cybersecurity and privacy standards for state information technology systems under State CIO authority, including annual compliance assessments of agencies and contracted vendors, with requirements for data security safeguards and incident reporting.

• Recodifies North Carolina Longitudinal Data System from Chapter 116E into Part 13 of Chapter 143B, maintaining student and workforce data linkage limited to five years post-secondary education completion, with strict privacy protections and de-identified data requirements.

• Modifies 911 service charge regulations effective July 1, 2024, requiring prepaid wireless service rates to match nonprepaid rates and adjusting fund allocations for PSAP grants and statewide 911 projects.

• Expands "identifying information" and "personal information" definitions to include broader categories of data that can cause harm, and requires mandatory health information exchange participation for certain medical providers serving Medicaid beneficiaries with expanded advisory board membership.