Compare tool
Compare state data breach notification laws
Choose up to six states. Fields come from the PRC 2026 survey extract; blanks show as not extracted.
| Field | South Carolina |
|---|---|
| Statute citation | S.C. Code Ann. § 39-1-90 (Trade and Commerce - Breach of Security; Notifications) (amended |
| Individual notice timing | notify in the most expedient time possible and without unreasonable delay, with no specific numeric |
| Attorney general notice | Yes South Carolina requires notification to the Consumer Protection Division of the Department of |
| Biometric data | No |
| Medical information | No |
| Government ID numbers | Not extracted |
| Paper records | Yes |
| Private right of action | Yes |
| Credit monitoring required | No |
| Breach definition (excerpt) | Not extracted in our PRC 2026 summary; check the statute. |