AK HB367

Establishes the Consumer Personal Information Privacy Act, requiring businesses that annually buy, sell, or share personal information of 100,000+ consumers/households, or derive 50%+ of revenue from selling consumer data, to notify consumers before collecting data and maintain updated privacy policies

Grants consumers rights to request disclosure of collected personal information within the preceding 5 years, request deletion of their data, and opt out of having their information sold, shared, or disclosed through a "Do Not Collect or Sell My Personal Information" webpage

Requires data brokers to register with the Department of Commerce, Community, and Economic Development and imposes a 3% fee on business revenue derived from buying, selling, or sharing consumer personal information, deposited into a new Consumer Privacy Account

Prohibits businesses from selling or sharing personal information of consumers 16 years of age or under, and restricts use of precise geolocation data to purposes disclosed to and consented by the consumer

Violations constitute unfair or deceptive trade practices under AS 45.50.471-45.50.561, with each day of violation as a separate offense; effective date January 1, 2027