Alabama Personal Data Protection Act

Alabama's comprehensive consumer privacy law gives Alabama residents rights to confirm, access, correct, delete, and port their personal data and to opt out of targeted advertising, sale, and profiling for solely automated significant decisions. Controllers must minimize data, secure it, get consent before processing sensitive data, publish a privacy notice, and may not sell or use for targeted advertising the data of known 13- to 15-year-olds without consent. It takes effect May 1, 2027 and has a lower applicability threshold (25,000 consumers) than most state privacy laws, offset by a broad small-business exemption.