GENERAL ASSEMBLY OF NORTH CAROLINA
SESSION 2025
H D
HOUSE BILL DRH40146-MR-60
Short Title: Protect Charlotte Firefighters' Ret. System. (Local)
Sponsors: Representative Clampitt.
Referred to:
*DRH40146 -MR-60*
A BILL TO BE ENTITLED 1
AN ACT TO PROTECT PARTICIPANTS AND BENEFICIARIES OF THE CHARLOTTE 2
FIREFIGHTERS' RETIREMENT SYSTEM FROM HARM RELATED TO BREACHES 3
OF DATA. 4
The General Assembly of North Carolina enacts: 5
SECTION 1.(a) Section 36 of Title VI of Chapter 506 of the 1987 Session Laws, as 6
amended by Chapter 830 of the 1991 Session Laws, S.L. 1990-100, and S.L. 2001-22, reads as 7
rewritten: 8
"Sec. 36. Employment of Professional Services. 9
(a) The Board of Trustees shall have the authority to employ and/or utilize professional 10
and secretarial services and to purchase and maintain such property, equipment and supplies as 11
are deemed necessary for the proper operation of the System. All expenses, fees and/or retainers 12
for the employment of services shall be borne by the System with the singular exception of the 13
employment of the Actuary. All fees and expenses in connection with the employment of a 14
qualified actuary to perform the annual evaluation of the Retirement System's financial condition 15
shall be paid by the City of Charlotte. 16
(a1) Actuary. The Board of Trustees shall annually request the City to employ a qualified 17
Actuary to perform such studies and evaluations of the Charlotte Firefighters' Retirement System 18
as may be necessary and/or desirable by the Board or City in connection with the administration 19
of the System. Within the meaning of this subsection, a qualified Actuary shall be an associate 20
or fellow of the Society of Actuaries and either a member of the Conference of Consulting 21
Actuaries or a member of the American Academy of Actuaries. 22
(b) Medical Board. The Board of Trustees shall appoint a Medical Board to be composed 23
of one or more physicians to serve at the pleasure of the Board. The Medical Board shall arrange 24
for and evaluate all medical examinations required under provisions of this act. The Medical 25
Board shall also investigate and evaluate all medical evidence, statements, and certificates 26
submitted by and on behalf of a Member in connection with an application for disability 27
retirement. The Medical Board shall render its conclusions and recommendations in 2017 28
Act- approved by NC Legislature Page 20 writing to the Board of Trustees in accordance with 29
the provisions of this act. 30
(c) Legal Counsel. The City attorney and staff shall be the legal advisor to the Board of 31
Trustees. The Board may employ separate legal counsel as it deems necessary and beneficial for 32
the operation of the System. 33
(d) Auditor. The Board of Trustees shall appoint an Auditor who shall be a certified 34
public accountant. 35
H.B. 215
Feb 25, 2025
HOUSE PRINCIPAL CLERK General Assembly Of North Carolina Session 2025
Page 2 DRH40146-MR-60
(e) Administrator. The Board of Trustees shall have the authority to appoint an 1
Administrator who shall be responsible for the administration and coordination of all System 2
operations and activities that are not otherwise specified in this act. Such administration shall be 3
in accordance with rules and regulations of this act and the policy and direction of the Board. In 4
the absence of an Administrator, the Secretary of the Board as specified in Section 34(b)(2) shall 5
be responsible for the coordination of Board meetings and providing proper notice of such 6
meetings. The Administrator shall be domiciled in this State or otherwise subject to the relevant 7
banking and insurance laws of this State. 8
(f) Insurance. The Board of Trustees may shall purchase and maintain that insurance 9
coverage that is necessary for the proper operation of the System, including worker's 10
compensation, fidelity insurance, and officers' and employees' liability coverage. coverage, and 11
data breach and cyber liability insurance that is for the benefit of the System and Participants and 12
Participants' Beneficiaries. All expenses incurred in purchasing or maintaining this coverage, 13
including fees, and retainers, shall be borne by the System." 14
SECTION 1.(b) Section 45 of Title VII of Chapter 506 of the 1987 Session Laws, 15
as amended by Chapter 830 of the 1991 Session Laws, S.L. 1990-100, and S.L. 2001-22, reads 16
as rewritten: 17
"Sec. 45. Annual Report to City Council. An annual report of the financial and actuarial 18
condition of the System, as of the preceding June 30, shall be prepared and forwarded to the City 19
Council in the quarter after receipt of the System's audit report from the Auditor. Such report 20
shall contain but shall not be limited to the Auditor's opinion, such statements contained in the 21
Auditor's report, a summary of the annual actuarial valuation and the actuary's valuation 22
certification. The annual report shall also include any instances of a data breach or other 23
cybersecurity incident impacting Participants and Participants' Beneficiaries, the cost of the 24
incident, and the steps taken in response to the incident." 25
SECTION 1.(c) Section 49 of Title VIII of Chapter 506 of the 1987 Session Laws, 26
as amended by Chapter 830 of the 1991 Session Laws, S.L. 1990-100, and S.L. 2001-22, reads 27
as rewritten: 28
"Sec. 49. Custody of System Assets. The Treasurer of the Retirement System shall be the 29
custodian and responsible for the safekeeping of all funds paid into the Charlotte Firefighters' 30
Retirement System. The Treasurer shall deposit said funds in a bank or banks otherwise subject 31
to the relevant banking and insurance laws of this State, as designated by the Board of Trustees. 32
The Treasurer may, with Board concurrence, use one or more nominees to facilitate transfer of 33
the System's securities and may hold the securities in safekeeping with the Federal Reserve 34
System, a clearing corporation, or a custodian bank which is a member of the Federal Reserve 35
System. All payments from said funds shall be authorized by the Treasurer only upon the signed, 36
written request of the Administrator, or the Secretary of the Board in the absence of an 37
administrator. The Treasurer shall furnish such bond as shall be required by the Board of Trustees 38
and premium for said bond shall be paid out of the funds of the System." 39
SECTION 1.(d) Section 50 of Title VIII of Chapter 506 of the 1987 Session Laws, 40
as amended by Chapter 830 of the 1991 Session Laws, S.L. 1990-100, and S.L. 2001-22, reads 41
as rewritten: 42
"Sec. 50. Investment/Reinvestment of Funds and Assets. The Board of Trustees shall be 43
vested with the authority and responsibility and shall have full power to hold, purchase, sell, 44
assign, transfer, lend and dispose of any of the securities and investments in which the System 45
shall have been invested, as well as the proceeds of said investments and any monies belonging 46
to the System. The Board of Trustees as fiduciaries shall: 47
(1) Discharge its duties solely in the interest of the Participants and the 48
Beneficiaries; 49
(2) Act with the same care, skill, prudence and diligence under the circumstances 50
then prevailing, that a prudent person acting in a similar capacity and familiar 51 General Assembly Of North Carolina Session 2025
DRH40146-MR-60 Page 3
with those matters would use in the conduct of a similar enterprise with similar 1
aims; 2
(3) Act with due regard for the management, reputation and stability of the issuer 3
and the character of the particular investments being considered; 4
(4) Make investments for the exclusive purpose of providing benefits to 5
Participants and Participants' Beneficiaries; 6
(5) Give appropriate consideration to those facts and circumstances the Board of 7
Trustees knows or should know are relevant to the particular investment or 8
investment course of action involved, including the role the investment or 9
investment course of action plays in that portion of the System's investments 10
for which the Board of Trustees has responsibility, and shall act accordingly. 11
Appropriate consideration shall include, but is not limited to, a determination 12
by the Board of Trustees that a particular investment or investment course of 13
action is reasonably designed as part of the investments of the System to 14
further the purposes of the System taking into consideration the risk of loss 15
and the opportunity for gain or other return associated with the investment or 16
investment course of action; and consideration of the following factors as they 17
relate to the investment or the investment course of action: a. The 18
diversification of the investments of the System; b. The liquidity and current 19
return of the investments of the System relative to the anticipated cash flow 20
requirements of the System; and c. The projected return of the investments of 21
the System relative to the funding 2017 Act- approved by NC Legislature Page 22
23 objectives of the System; 23
(6) Give appropriate consideration to investments which would enhance the 24
general welfare of the City and its citizens if those investments offer the safety 25
and rate of return comparable to other investments held by the System and 26
available to the Board of Trustees at the time the investment decision is made; 27
(7) May use a portion of income of the System to defray the cost of investing, 28
managing and protecting the assets of the System; and System, including data 29
breach and cyber liability insurance, and making whole a Participant or 30
Participant's Beneficiary who was a victim of a System data breach or other 31
cybersecurity incident. 32
(8) May utilize the services of Investment Fiduciaries to manage the assets of the 33
System. These Investment Fiduciaries shall be subject to the terms, conditions, 34
and limitations provided in this section and any limitations as set forth by the 35
Board of Trustees." 36
SECTION 1.(e) Title VIII of Chapter 506 of the 1987 Session Laws, as amended by 37
Chapter 1033 of the 1987 Session Laws, Chapter 248 of the 1989 Session Laws, Chapter 830 of 38
the 1991 Session Laws, S.L. 1990-100, and S.L. 2001-22, is amended by adding a new section 39
to read: 40
"Sec. 55.1. Participants and Beneficiary Protection Against Cybersecurity Incidents. In 41
addition to maintaining data breach and cyber liability insurance, the Board of Trustees shall 42
have the duty to do all of the following to protect Participants and Beneficiaries of the System, 43
which may be delegated to the Administrator or other contracted entity: 44
(1) Set up a reporting mechanism and grievance procedure for Participants and 45
Beneficiaries who may be victims of a System data breach or other 46
cybersecurity incident. 47
(2) Investigate all reported System data breaches or other cybersecurity incidents, 48
regardless of the source of the report. 49
(3) Provide resources for Participants and Beneficiaries who may be victims of a 50
System data breach or other cybersecurity incident that include actionable 51 General Assembly Of North Carolina Session 2025
Page 4 DRH40146-MR-60
steps that Participants and Beneficiaries may take to protect their funds and 1
assets from any threats related to the System data breach or other 2
cybersecurity incident that has occurred or that may occur. 3
(4) If a System data breach or other cybersecurity incident is found to have 4
occurred, make whole the Participants or Beneficiaries who were victims of 5
that System data breach or other cybersecurity incident." 6
SECTION 2.(a) As soon as practicable, including after assessing whether the current 7
administrator has failed to meet its obligations under the existing contract, the Board of Trustees 8
of the Charlotte Firefighters' Retirement System (Board of Trustees) shall contract with an 9
administrator for the Charlotte Firefighters' Retirement System (System) that meets all of the 10
requirements under this act. 11
SECTION 2.(b) Within 60 days of this act becoming effective, the Board of Trustees 12
shall enter into a contract for data breach and cyber liability insurance in accordance with this 13
act. 14
SECTION 2.(c) Within 60 days of this act becoming effective, the Board of Trustees 15
shall set up the reporting mechanism and grievance procedure for Participants and Beneficiaries 16
who may have been victims of a System data breach or other cybersecurity incident required 17
under this act. 18
SECTION 2.(d) The Board of Trustees shall investigate any System data breaches 19
or other cybersecurity incidents that have been reported within a year prior to the effective date 20
of this act or after and provide the resources required under this act to Participants and 21
Beneficiaries if any are found to have occurred on or after that date. 22
SECTION 2.(e) The requirement under this act to make whole a Participant or 23
Beneficiary who is a victim of a System data breach or other cybersecurity incident shall apply 24
to incidents occurring on or after the effective date of this act. 25
SECTION 3. This act applies only to the City of Charlotte. 26
SECTION 4. This act is effective when it becomes law. 27