06/06/2026
Alabama just passed a consumer privacy law. It takes effect in May 2027 and carries penalties of up to $15,000 per violation.
The coverage threshold—businesses collecting data on more than 25,000 Alabama consumers per year, or earning more than 25 percent of their revenue from selling data on more than 10,000 consumers—is lower than any similar state law that came before it. That means more Gulf Coast businesses are covered than they might expect.
Compliance requires a privacy notice, a process for handling consumer data requests, updated vendor contracts, and a designated privacy contact. Alabama’s version skips the data protection impact assessment requirement, making it more manageable than other state laws.
The first step is figuring out whether it applies to you. Book a Risk-Free Strategy Session at outsidechieflegal.com.