Privacy Law Library

Consumer credit report security freeze

AL Security Freeze Law

Credit reporting · Financial

Lets Alabama consumers place a security freeze on their credit reports so agencies cannot release them for credit purposes without the consumer's authorization. Agencies must place, lift, and remove freezes within set deadlines, give a PIN or password, and include an Alabama freeze-rights notice with the federal FCRA summary of rights.

Where
Alabama
Citation
Ala. Code §§ 8-35-1 to 8-35-3 (Act 2012-500)
Status
In force
Enforced by
Not specified in the chapter (courts)
People can sue
No
Penalties
A person that violates the freeze section may be fined up to $100 per violation concerning a specific consumer.
Applies to
  • Consumer credit reporting agencies that furnish consumer credit reports on Alabama residents
  • Certain entities and uses are exempt, such as existing creditors reviewing or collecting accounts

What a privacy notice must say

  • While a freeze is in place, send written confirmation within 30 days of any change to the consumer's name, date of birth, SSN, or address.Ala. Code § 8-35-2(n)
  • Provide the prescribed Alabama security freeze notice whenever the FCRA summary of rights must be given.Ala. Code § 8-35-3

Rights it gives people

  • Consumers may place a security freeze by certified mail or by the agency's online or toll-free method; the agency must place it within three business days and confirm within 10 business days with a unique PIN or password.Ala. Code § 8-35-2(a)-(c)

Practices it requires

  • Temporarily lift a freeze within 15 minutes for phone or electronic requests during normal business hours (three business days for written requests), and remove a freeze within three business days of a removal request.Ala. Code § 8-35-2(f), (k)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Unverified: Effective date of Act 2012-500 not confirmed; left null. | § 8-35-2(p) still allows a fee of up to $10, but federal law (15 U.S.C. § 1681c-1(i), added in 2018) requires free freezes nationwide; how the two interact was not researched. | The chapter names no enforcing agency; whether the Deceptive Trade Practices Act applies was not confirmed.

Research reference, not legal advice.