Alabama Personal Data Protection Act (privacy / profiling opt-out)
Alabama Personal Data Protection Act (HB 351)
Alabama · 2026 Ala. Acts (HB 351), Alabama Personal Data Protection Act
- Status
- Enacted (not yet in effect)
- Takes effect
- May 1, 2027
- Applies to
- Controllers that process the personal data of 25,000+ Alabama consumers, or 10,000+ consumers while deriving over 25% of gross revenue from selling personal data (per the enacted thresholds).
- Enforced by
- Alabama Attorney General (exclusive enforcement)
Alabama's comprehensive consumer privacy law gives residents the right to tell businesses to stop using their personal data for profiling that drives automated decisions with major consequences. This covers decisions about things like lending and credit, housing, insurance, education, employment, healthcare, criminal justice, and access to basic necessities. Consumers can also opt out of targeted advertising and the sale of their data. The Alabama Attorney General enforces the law, and there is no individual lawsuit right.
Who is protected: Alabama residents acting in an individual or household context (consumers).
Legal detail
HB 351 (Alabama Personal Data Protection Act) grants consumers a right to opt out of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, enforced exclusively by the Attorney General with civil penalties up to $15,000 per violation.
Key facts
| Jurisdiction | Alabama |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | April 16, 2026 |
| Citation | 2026 Ala. Acts (HB 351), Alabama Personal Data Protection Act |
| Private right of action | No, agency enforcement only |
| Penalties | Civil penalties of up to $15,000 per violation, following a notice of violation and a 45-day cure period. |
| Topics | consumer data privacy · automated decision-making |
| Bill text | Alabama Legislature, HB 351 (2026 Regular Session) |
More AI rules in Alabama
- Alabama SB 63 (AI in prior authorization, eff. Oct 2026) · In effect
- Alabama Synthetic Private Images Law · In effect
- Alabama Election Deepfake Law · In effect
- Alabama Child Protection Act (AI-generated CSAM) · In effect
- Executive Order No. 738 - Alabama Generative Artificial Intelligence… · In effect
- Alabama Generative AI Acceptable Use Policy (AI-GV-P2) · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare companies · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.