Privacy law in Alabama

There is no signed, comprehensive consumer privacy law in Alabama yet. HB283, introduced in February 2025, would create broad privacy rights for Alabama residents — including the right to know what data companies collect, to correct it, delete it, and opt out of its sale — but as of the extraction date it has only been introduced and has not been enacted. Here's what you should know about the pending bill, existing sector-specific protections, and what you can still do to remove your personal data from data brokers.

What protections do exist in Alabama

Alabama Data Breach Notification Act

Requires businesses and government entities to notify Alabama residents when a data breach exposes their sensitive personal information, such as Social Security numbers, financial account numbers, and medical information. Notification must be made in the most expedient time possible and without unreasonable delay. (Ala. Code § 8-38-1 et seq.)

Alabama Student Data Privacy Act

Protects the personal information of K-12 students in Alabama by restricting how education technology operators may collect, use, and share student data. Operators are prohibited from using student data for targeted advertising or selling it to third parties. (Ala. Code § 16-41A-1 et seq.)

Federal protections that apply to Alabama residents

Even without a state privacy law, federal protections still apply to Alabama residents. The FTC's Section 5 authority prohibits unfair or deceptive data practices by businesses. HIPAA protects your medical and health information held by covered providers and insurers. COPPA restricts the online collection of personal data from children under 13. And the Gramm-Leach-Bliley Act (GLBA) requires financial institutions to safeguard your financial data and explain how they share it.

What’s happening in the Alabama legislature

Several privacy bills have been introduced in Alabama. None has passed into law yet, but they signal where consumer privacy legislation in the state may be heading.

HB283

HB283 would give Alabama residents the right to confirm whether a business is processing their personal data, correct inaccuracies, request deletion, obtain a portable copy, and opt out of targeted advertising, data sales, and automated profiling. The bill would apply to businesses that process data of more than 50,000 consumers, or more than 25,000 consumers if they derive over 25% of gross revenue from data sales. The Alabama Attorney General would have exclusive enforcement authority, with a 60-day cure period before any enforcement action. The bill was introduced on February 13, 2025 and referred to the Commerce and Small Business committee. Status: introduced.

How Optery helps Alabama residents

Data brokers collect and sell personal information about almost every American adult — home addresses, phone numbers, family relationships, employment history. They do this regardless of whether your state has a comprehensive privacy law. Optery scans over 200 data brokers to find where your information is exposed, then submits removal requests on your behalf and tracks compliance. Our service works for every US resident, not just those in states with strong privacy statutes.

See which data brokers have your information →