On March 28, 2018, Alabama was the last State, after South Dakota, to have adopted a data breach notification statute.
The Alabama Data Breach Notification Act of 2018 (S.B. 318) went into effect on June 1, 2018. According to the Alabama Statute, any “covered entity” and “third-party agent” must comply. Written notification must be made to all affected individuals unless it is determined that the breach of security “is not reasonably likely to cause substantial harm” to the individuals to whom the information relates.
Originally published on Technethics on January 2019