State Agency Website
Timing of Consumer Notification
“Most expedient time possible and without unreasonable delay.”
Method of Notice
Mail or phone. Email permitted if primary method of communication with consumer or complies with E-SIGN.
Breach Definition
Unauthorized access to and acquisition of unencrypted or unredacted computerized data that compromises security, confidentiality or integrity of personal information maintained by person, when illegal use of information has occurred or is reasonably likely to occur or use of information creates material risk of harm to resident.
PII Definition
Individual’s first name or first initial and last name in combination with any of these, when not encrypted nor redacted:
  1. Social Security number;
  2. Driver's license number or state identification card number;
  3. Financial account number, or credit card or debit card number in combination with any required security code, access code or password that would permit access to financial account; or
  4. Other numbers or information which may be used to access person's financial accounts or numbers or information issued by governmental or regulatory entity that uniquely identify individual.
Third Party Notice
If person or business maintains covered information for someone else, it must notify them immediately following discovery of breach.
How to Notify
No specific content requirement.
Substitute Notice
(a) Email notice when person has email address for subject person; (b) conspicuous posting of notice on web site page of person, if person maintains one; or (c) notification to major statewide media.
Credit Monitoring
Not required.
When to Notify Credit Agencies
If business provides notice to more than 1,000 South Carolina residents at one time.
This State's Law
State Government Agency Notification Required
Yes, if business provides notice to more than 1,000 South Carolina residents at one time, must notify the South Carolina Consumer Protection Division of the Department of Consumer Affairs.