§ 75-62. Social security number protection.
§ 75‑62. Socialsecurity number protection.
(a) Except as providedin subsection (b) of this section, a business may not do any of the following:
(1) Intentionallycommunicate or otherwise make available to the general public an individual'ssocial security number.
(2) Intentionally printor imbed an individual's social security number on any card required for theindividual to access products or services provided by the person or entity.
(3) Require anindividual to transmit his or her social security number over the Internet,unless the connection is secure or the social security number is encrypted.
(4) Require anindividual to use his or her social security number to access an Internet Website, unless a password or unique personal identification number or otherauthentication device is also required to access the Internet Web site.
(5) Print anindividual's social security number on any materials that are mailed to theindividual, unless state or federal law requires the social security number tobe on the document to be mailed.
(6) Sell, lease, loan,trade, rent, or otherwise intentionally disclose an individual's socialsecurity number to a third party without written consent to the disclosure fromthe individual, when the party making the disclosure knows or in the exerciseof reasonable diligence would have reason to believe that the third party lacksa legitimate purpose for obtaining the individual's social security number.
(b) Subsection (a) ofthis section shall not apply in the following instances:
(1) When a socialsecurity number is included in an application or in documents related to anenrollment process, or to establish, amend, or terminate an account, contract,or policy; or to confirm the accuracy of the social security number for thepurpose of obtaining a credit report pursuant to 15 U.S.C. § 1681(b)(2). Asocial security number that is permitted to be mailed under this section maynot be printed, in whole or in part, on a postcard or other mailer notrequiring an envelope, or visible on the envelope or without the envelopehaving been opened.
(2) To the collection,use, or release of a social security number for internal verification oradministrative purposes.
(3) To the opening of anaccount or the provision of or payment for a product or service authorized byan individual.
(4) To the collection,use, or release of a social security number to investigate or prevent fraud,conduct background checks, conduct social or scientific research, collect adebt, obtain a credit report from or furnish data to a consumer reportingagency pursuant to the Fair Credit Reporting Act, 15 U.S.C. § 1681, et seq.,undertake a permissible purpose enumerated under Gramm Leach Bliley, 12 C.F.R.§ 216.13‑15, or locate an individual who is missing, a lost relative, ordue a benefit, such as a pension, insurance, or unclaimed property benefit.
(5) To a business actingpursuant to a court order, warrant, subpoena, or when otherwise required bylaw.
(6) To a businessproviding the social security number to a federal, state, or local governmententity, including a law enforcement agency, court, or their agents or assigns.
(7) To a social securitynumber that has been redacted.
(c) A business coveredby this section shall make reasonable efforts to cooperate, through systemstesting and other means, to ensure that the requirements of this Article areimplemented.
(d) A violation of thissection is a violation of G.S. 75‑1.1. (2005‑414, s. 1.)