North Carolina Health Privacy Rights

No major enhancements beyond HIPAA. North Carolina's Identity Theft Protection Act covers data breaches (including health info) requiring notice to individuals and the Consumer Protection Division. For general PHI, NC relies on HIPAA. Providers must keep patient info confidential (the NC physician-patient privilege is recognized). Mental health records have special confidentiality under state law but similar to federal 42 CFR Part 2 and HIPAA. NC doesn't have a specific timeline shorter than 30 days for records – so the new 15-day federal rule leads. One note: NC has a statute that minors who consent to certain treatments (e.g., for STIs, pregnancy) have the right to confidentiality of those records, which cannot be released to parents without the minor's permission, affording those minors a privacy right.