The Letter About Your Information
G.S. 75-65 — without unreasonable delay, and the Attorney General each time
In North Carolina, a business that must notify affected persons of a security breach does so without unreasonable delay, consistent with the legitimate needs of law enforcement and the measures needed to find contact information, determine the scope of the breach and restore the data system.
| Who is told | When, as the section puts it |
|---|---|
| Who is toldEach affected person | When, as the section puts itWithout unreasonable delay |
| Who is toldThe Consumer Protection Division of the Attorney General's Office, whenever affected persons are notified | When, as the section puts itWithout unreasonable delay, with the nature of the breach and the number affected |
| Who is toldThe consumer reporting agencies, if more than 1,000 persons are notified at one time | When, as the section puts itWithout unreasonable delay |
- The notice includes the toll-free numbers, addresses and websites of the Federal Trade Commission and the North Carolina Attorney General's Office, with a statement that the individual can get information about preventing identity theft from them.
What counts as personal information, the forms notice may take, and the exceptions for encrypted data are in the section and are not reproduced in full here. Whether a notice was required or on time is a question for the attorney general, a court, and a licensed North Carolina attorney.
Sources for this section (1)
- G.S. 75-65 — Protection from security breaches
Legal information, not legal advice. Verified as of September 2026. Applying it to a particular situation is the work of a licensed North Carolina attorney.