NC H215

Requires the Charlotte Firefighters' Retirement System Board of Trustees to purchase and maintain data breach and cyber liability insurance for the benefit of participants and beneficiaries

Mandates the Board establish a reporting mechanism and grievance procedure for participants and beneficiaries who may be victims of data breaches or cybersecurity incidents within 60 days of the act becoming effective

Requires the Board to investigate all reported data breaches, provide resources with actionable protective steps to affected participants, and make whole any participants or beneficiaries who are victims of cybersecurity incidents

Adds annual reporting requirements to City Council on any data breaches or cybersecurity incidents, including costs incurred and response steps taken

Applies retroactively to investigate incidents reported within one year prior to the effective date, though the "make whole" restitution requirement applies only to incidents occurring after the act takes effect