HB216 - Alabama Consumer Privacy Act

• Creates the Alabama Consumer Privacy Act establishing consumer rights to request disclosure of personal information businesses collect, including categories, sources, purposes, and third-party recipients.

• Grants consumers the right to request deletion of their personal information from business records, with limited exceptions for legal compliance, fraud prevention, and research.

• Authorizes consumers to opt out of personal information sales and prohibits businesses from discriminating against consumers who exercise privacy rights, though allows financial incentives tied to data value.

• Prohibits sale of personal information for consumers under 18 years old without affirmative parental or guardian authorization.

• Establishes enforcement through the Deceptive Trade Practices Act with private civil right of action for unauthorized access or disclosure of unencrypted personal information, and requires Attorney General to adopt implementing rules by October 1, 2022; effective October 1, 2022.