On March 28, 2018, Alabama was the last State, after South Dakota, to adopt a data breach notification statute.
The Alabama Data Breach Notification Act of 2018 (S.B. 318) went into effect on June 1, 2018. According to the Alabama Statute, any “covered entity” and “third-party agent” must comply. Written notification must be made to all affected individuals unless it is determined that the breach of security “is not reasonably likely to cause substantial harm” to the individuals to whom the information relates.
For more information and assistance on privacy Francesca Giannoni-Crystal and Federica Romanelli.