HB 222 - Alaska Consumer Information Protection Act Summary

• Creates comprehensive consumer privacy law (AS 45.48.760 - 45.48.925) requiring businesses to disclose what personal information they collect, the purposes, and retention periods at point of collection.

• Grants consumers rights to delete personal information, correct inaccurate information, and obtain disclosure of what data businesses hold about them, with 45-day response deadline for businesses.

• Prohibits businesses from selling or sharing consumer personal information without explicit opt-in consent; minors under 16 require parental consent; businesses must wait 12 months before re-requesting consent after denial.

• Establishes special protections for sensitive personal information (SSN, financial accounts, precise geolocation, genetic data, health information, sexual orientation) and restricts their use even when personal information sales are permitted.

• Creates private right of action for consumers whose unencrypted personal information is breached due to business negligence, with damages of $100-$750 per failure or actual damages; applies to contracts entered after effective date of January 1, 2023.