Law: Please note this State does not have a general privacy law in effect, you can visit USA State Law Tracker to monitor the progress of US State bills.

Regulator: The Alabama Attorney General ('AG')

Summary: There is no comprehensive privacy law in Alabama. The Constitution of Alabama does not explicitly recognize a right to privacy but does contain provisions that would protect any right to privacy of an Alabama citizen from being deprived by foreign law. According to the Alabama Data Breach Notification Act of 2018, there is a requirement to notify personal data breaches to the Alabama Attorney General (AG) and affected individuals to whom the information relates. In addition, under the Insurance Data Security Law, insurance licensees are required to protect personal information and investigate and respond to breaches of security by notifying the Alabama Department of Insurance within three business days. Finally, there are other Alabama statutes that regulate patient and medical records, financial information, and telemarketing and telephone communications.

You can follow legislative developments in the US through the USA State Law Tracker.