What is the data breach notification deadline in South Carolina?

South Carolina requires notice to affected individuals in the most expedient time possible and without unreasonable delay (S.C. Code §39-1-90).

Do you have to notify the South Carolina Attorney General of a data breach?

Yes. SC Dept. of Consumer Affairs must be notified.

← All jurisdictions

SC · data breach notification

South Carolina

med

S.C. Code §39-1-90

Individual deadline

No fixed limit

Trigger standard

Any breach

AG / regulator

Required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	None, notice required on any qualifying breach of covered personal information.
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	SC Dept. of Consumer Affairs, required at 1,000+ residents; at time cras are notified Written notice to DCA
Credit reporting agencies	Notify CRAs above 1,000 residents.
Substitute notice	Typically available above $250,000 cost / 500,000 affected (verify).
Private right of action	Yes.
Penalties	$1,000 per resident for knowing/willful violation

Rule last verified July 10, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a South Carolina breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →