Comprehensive Privacy Law
Alabama Personal Data Protection Act
APDPA
Alabama · Not yet effective — signed ~Apr 2026, effective May 1, 2027
Verify detailsNewly enacted, not yet in force. No revenue-dollar threshold: applies if you process personal data of 25,000+ consumers (excluding payment-only data), or derive 25%+ of gross revenue from selling personal data regardless of consumer count. Nonprofit exemption is conditional (under 100 employees and no data sales), not automatic.
Ala. HB 351 (2026), exact codification pendingRead statute →
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual revenue, data volume, and data types.