Law: Please note this State does not have a general privacy law in effect, you can visit USA State Law Tracker to monitor the progress of US State bills.

Regulator: The Alabama Attorney General ('AG')

Summary: The Constitution of Alabama does not specifically protect the right to privacy, however, the State recognises all four torts of invasion of privacy (Phillips v. Smalley Maint. Svcs., Inc., 435 So.2d 705 (Ala. 1983)). Alabama was the last US State to enact a breach notification law, the Alabama Breach Notification Act, in 2018, according to which, covered entities that suffer a breach must notify affected individuals as well as the AG, when the number of affected individuals exceeds 1,000. In addition, under the Insurance Data Security Law, insurance licensees are required to protect personal information and investigate and respond to breaches of security by notifying the Alabama Department of Insurance within three business days. Finally, there are also Alabama statutes that regulate patient and medical records, financial information, and telemarketing and telephone communications.