Bill > SB318

This bill, the Alabama Data Breach Notification Act of 2018, requires covered entities (businesses and government agencies) to notify individuals when their sensitive personal information, such as Social Security numbers or financial account details, has been breached and is likely to cause substantial harm. It defines key terms, outlines the notification process, including allowing for substitute notification in certain circumstances, and imposes penalties for non-compliance, including civil fines up to $500,000 per breach. The bill also requires covered entities and third-party agents to securely dispose of sensitive personal information records when no longer needed. Entities already subject to federal data breach notification laws are exempted from the act's requirements.

Business and Industry, Government Affairs