HB 159 - Consumer Personal Information Privacy Act

• Establishes the Consumer Personal Information Privacy Act, creating privacy rights for Alaska consumers including the ability to access, delete, and opt-out of the sale or sharing of their personal information

• Requires businesses collecting personal information to provide notice before collection, disclose data practices in privacy policies, and maintain reasonable security measures; businesses must respond to consumer requests within 45 days

• Prohibits businesses from selling or sharing personal information of consumers under 18 without consent (13 and older can consent; under 13 requires parental consent), and restricts use of precise geolocation data

• Establishes data broker registration requirements and a consumer privacy account funded by registration fees (amount set by regulation) and a 3% revenue fee on businesses that sell or share personal information

• Makes violations of the Act unfair or deceptive trade practices; creates a private right of action with minimum damages of $1 per consumer; effective date January 1, 2023, with transition exemptions for certain health professionals until January 1, 2024