Ala. Comprehensive Privacy Bill Gets Hearing Next Week
The Alabama House Commerce Committee will weigh a comprehensive privacy bill at a hearing next Wednesday, according to a committee agenda. Rep. Mike Shaw (R) on Thursday introduced HB-283, which would be exclusively enforced by the state attorney general.
Sign up for a free preview to unlock the rest of this article
It might be the first time Alabama lawmakers have considered a comprehensive privacy bill, Future of Privacy Forum Senior Director Keir Lamont emailed Friday. HB-283 “appears firmly within the 'Washington Privacy Act' mold, leaning toward the broader iterations of that framework with provisions such as heightened protections for adolescent data and the ability to exercise rights on a default basis through device signals.”
The Alabama bill would include rights for consumers to confirm a controller is processing their personal data, correct any inaccuracies, delete the data, obtain a copy of the data and opt out of processing of the consumer's data. Consumers could designate an authorized agent to exercise their rights.
HB-283 would apply to entities doing business in the state and controlling or processing personal data of more than 50,000 consumers, excluding data used only for completing payments, or that control or process data of at least 25,000 consumers while deriving 25% of their revenue from selling that data.
The bill would include a range of entity-level exemptions, including for governments, nonprofits, higher education, financial institutions and national securities associations. Also, it has data-level carveouts for the Health Insurance Portability and Accountability Act, Fair Credit Reporting Act and other federal privacy laws.