North Carolina Identity Theft Protection Act (ITPA)
The North Carolina Identity Theft Protection Act (ITPA), codified at N.C. Gen. Stat. Chapter 75, Article 2A, mandates businesses, government agencies, and nonprofits to safeguard personal information, notify individuals of data breaches within 60 days, allow free credit freezes, and enables victims to sue for damages. Recent amendments (e.g., SB 711, 2025) extend liability to…