NC S757

Creates the North Carolina Consumer Privacy Act, effective January 1, 2026, establishing data privacy rights for state residents including the right to access, delete, and obtain copies of personal data, and to opt out of targeted advertising and data sales

Applies to businesses with annual revenue of $25 million or more that either process personal data of 100,000+ consumers or derive over 50% of gross revenue from selling personal data of 25,000+ consumers

Exempts government entities, tribes, nonprofits, higher education institutions, HIPAA-covered entities, financial institutions subject to Gramm-Leach-Bliley Act, and data already regulated by federal laws including FERPA and the Fair Credit Reporting Act

Grants exclusive enforcement authority to the Attorney General, with penalties up to $7,500 per violation; requires 45-day cure period before enforcement action can proceed; creates no private right of action for consumers

Establishes a Consumer Privacy Restricted Account funded by enforcement penalties, capped at $4 million with excess transferred to the General Fund, to support investigation costs and consumer education