State Guide
South Carolina Privacy & Data Security Laws
Every statute below can apply to a business handling South Carolina residents' data, depending on your revenue, the number of South Carolina consumers you process, and what kind of data you collect. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Data Security & Breach Notification · 1
Requires notifying affected residents (and often the state AG/regulator) after a breach of unencrypted personal information such as SSNs, driver's license/state ID numbers, or financial account numbers. Applies regardless of company size whenever you hold covered personal information about a resident of this state.
Children & Minors Online Safety · 1
A minors' design-code law (not a comprehensive privacy law — easy to confuse with one). Applies to entities with >$25M revenue, 50,000+ consumers, or 50%+ revenue from selling personal data. Not enjoined as of this writing, per the latest source found. (Note: the bill that actually passed and was signed is H.3431, not H.3405 as sometimes cited.)