Alabama Enacts Comprehensive Data Privacy Law - White & Case LLP
Alabama has enacted a comprehensive data privacy law, joining the growing list of US states with consumer privacy protections. The law includes provisions similar to CCPA/CPRA, such as opt-out rights, data broker registration, and requirements for risk assessments on sensitive data and automated decision-making.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 6, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: Law effective 1 year after enactment (likely mid-2025); specific deadlines for data broker registration may be earlier.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Alabama now has a comprehensive data privacy law with opt-out rights, data broker registration, and risk assessment requirements for sensitive data and ADMT.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants
What you must do
Review and update privacy policies, implement opt-out mechanisms (including universal opt-out via GPC), register as data broker if applicable, and conduct risk assessments for sensitive data processing and automated decision-making.
Deadline
Law effective 1 year after enactment (likely mid-2025); specific deadlines for data broker registration may be earlier.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- CDIA v. State of Texas: FCRA Preempts Texas Medical Debt Reporting Ban - ACA International
- CalPrivacy Settles with Two Data Brokers over Registration Failures and Privacy Violations - hunton.com
- CalPrivacy Authorizes Rulemaking on Opt-Out Signals, Raises Data Broker Fees, and Starts the Clock on DROP Amendment Comment Period - Wilson Sonsini
- CO SB26-189: Automated Decision-Making Technology
- ICYMI: California takes historic action against data brokers - gov.ca.gov