Alabama’s comprehensive data privacy law establishes new consumer rights and compliance obligations for businesses that collect or process residents’ personal data. Consumers gain rights to access, correct, delete,
and obtain copies of their personal information, as well as opt out of targeted advertising and certain data sales. The law also includes unique provisions regarding applicability thresholds, enforcement, and the definition of data “sales,” while providing businesses time to prepare before the law’s effective date.