NC H462

Establishes the North Carolina Data Privacy Act effective January 1, 2026, applying to businesses that process personal data of at least 35,000 consumers or 10,000 consumers while deriving over 20% of gross revenue from data sales

Grants consumers rights to access, correct, delete, and obtain copies of their personal data, opt out of targeted advertising and data sales, and appeal controller decisions within 45 days

Requires controllers to obtain consent before processing sensitive data (biometric, genetic, health, precise geolocation, children's data) and prohibits targeted advertising or data sales to minors ages 13-17 without consent

Creates the Social Media Safety Act requiring social media platforms with over $100 million in annual revenue to verify user ages and obtain parental consent before allowing minors under 18 to create accounts

Violations of the data privacy provisions constitute unfair trade practices enforced by the Attorney General with a 60-day cure period, while social media violations carry $2,500 penalties per violation and Class 1 misdemeanor charges