Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I store personal information about my customers in South Carolina? What are the requirements?

Storing Personal Information in South Carolina

Yes, you can store personal information about your customers in South Carolina, but you must comply with the state’s data protection laws.

Requirements for Storing Personal Information

If you plan to store any nonpublic information, which includes information that can be used to identify a consumer, such as social security numbers, driver’s license numbers, account numbers, credit or debit card numbers, security codes, access codes, passwords, or biometric records, you must comply with the requirements of SCCL 38-99-10 [2.1]. This includes implementing an information security program and conducting a risk assessment [2.3].

Additionally, if you plan to collect personal information through a website, you must comply with the requirements of SCCL 30-2-40, which requires state entities to clearly display their privacy policy and the name and telephone number of the person responsible for administration of the policy [2.1].

Restrictions on Release of Information

Access to eligibility information is restricted to persons, agencies, and entities subject to confidentiality standards comparable to those set forth in South Carolina law [3.2]. Medical information is also protected and can only be released with written permission or in emergency situations [3.1][3.2].

Conclusion

In summary, you can store personal information about your customers in South Carolina, but you must comply with the state’s data protection laws, including implementing an information security program, conducting a risk assessment, and complying with the requirements of SCCL 30-2-40 and SCCL 38-99-10. Additionally, restrictions on the release of information must be followed.

Source(s):
Jurisdiction

South Carolina