Alabama legislation · 2026 Regular Session
Alabama HB351: Data privacy; processing of data regulated, consumer actions related to data authorized
Status: Signed into law, April 17, 2026
What the bill says
An Act, Relating to data privacy; to authorize a consumer to take certain actions regarding the consumer's personal data; to regulate the manner in which a controller may process personal data; to provide for the obligations of a data processor; to regulate the processing of deidentified data; and to provide for enforcement of this act.
From the enrolled text:
An Act, Relating to data privacy; to authorize a consumer to take certain actions regarding the consumer's personal data; to regulate the manner in which a controller may process personal data; to provide for the obligations of a data processor; to regulate the processing of deidentified data; and to provide for enforcement of this act. BE IT ENACTED BY THE LEGISLATURE OF ALABAMA: Section 1. This act shall be known as the Alabama Personal Data Protection Act. Section 2. For the purposes of this act, the following terms have the following meanings: (1) AFFILIATE. A legal entity that shares common branding with another legal entity or that controls, is controlled by, or is under common control with another legal entity. (2) AUTHENTICATE. To use reasonable methods to determine that a request to exercise any of the consumer rights afforded under this act is being made by, or on behalf of, a consumer who is entitled to exercise those consumer rights with respect to the consumer's personal data at issue. (3) BIOMETRIC DATA. Data generated by automatic measurements of an individual's biological characteristics, such as a fingerprint, voiceprint, retina, or iris, that are used to identify a specific individual. The term does not include any of the following: a. A digital or physical photograph. Page a. A digital or physical photograph. …
Sponsors
- Shaw, Mike (R, HD-047) · primary sponsor
Latest actions
- : Enacted
- : Signature Requested
- : Delivered to Governor
- : Enrolled
- : Ready to Enroll
- : Ready to Enroll
- : Shaw Motion to Concur In and Adopt Senate Amendment - Adopted Roll Call 1258
- : Motion to Read a Third Time and Pass as Amended - Adopted Roll Call 1198
- : Elliott motion to Adopt - Adopted Roll Call 1197
- : Elliott 1st Amendment Offered
Votes
- House Roll Call #1258 (April 8, 2026): 104 yea, 0 nay, passed
- Senate Roll Call #1198 (April 7, 2026): 34 yea, 0 nay, passed
- Senate Roll Call #1197 (April 7, 2026): 34 yea, 0 nay, passed
- Senate Roll Call #1196 (April 7, 2026): 34 yea, 0 nay, passed
- Senate Roll Call #1195 (April 7, 2026): 34 yea, 0 nay, passed
- Senate Roll Call #1194 (April 7, 2026): 34 yea, 0 nay, passed
Subjects: Consumer Protection
Common questions
- What is HB351?
- HB351 is a bill in the Alabama Legislature (2026 Regular Session): Data privacy; processing of data regulated, consumer actions related to data authorized.
- What does HB351 do?
- In its own words: An Act, Relating to data privacy; to authorize a consumer to take certain actions regarding the consumer's personal data; to regulate the manner in which a controller may process personal data; to provide for the obligations of a data processor; to regulate the processing of deidentified data; and to provide for enforcement of this act.
- What is the status of HB351?
- Signed into law as of April 17, 2026. Latest action: Enacted (April 17, 2026).
- Who sponsored HB351?
- Shaw, Mike (R, HD-047).
- Where is the official record for HB351?
- On the Alabama Legislature website: https://alison.legislature.state.al.us/instrument/2026RS/HB351
Source: official Alabama record. Tracked by Delilah, AI for legislation across all 50 states and Congress.