Esheria Regulatory Atlas
Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.
143 matching statutes
United States — Alabama
1 provisions
The department must use received data and information for the public benefit, and patient data submitted to the department must remain confidential and protected from discovery.
United States — Alabama
1 provisions
An app store provider must protect personal age verification data by limiting collection and processing to what is necessary and by using industry-standard encryption when transmitting it.
United States — Alabama
1 provisions
The board must set up and keep operating a system for protecting, collecting, and sharing health care facility acquired infection data, after consulting with and getting approval from the council. The system must become operational within 12 months after written certification to the Governor that the department has eno
United States — Alabama
1 provisions
The system must protect matched partner data, partner entities keep ownership of data they provide, and the council controls access requests and the research agenda.
United States — Alabama
1 provisions
This chapter is known as the Alabama Personal Data Protection Act.
United States — Alabama
1 provisions
This section says the chapter does not stop controllers or processors from doing certain listed data-processing activities, but it also imposes safeguard and proof requirements when the section is used.
United States — Alabama
1 provisions
The commission must facilitate information exchange under its rules and data protection principles, and member states must provide specified licensee information for that purpose.
United States — Alabama
1 provisions
The board must review volunteer fire services, study fire protection issues, collect data on a reasonable fire protection and suppression fee, report its findings to the Mobile County Commission by August 1, 2020, and then keep serving in an advisory role as needed.
United States — Alabama
1 provisions
The Legislature states that this article is meant to help collect appropriate information, records, and research data while protecting the individuals involved.
United States — Alabama
1 provisions
This section creates the council, sets who sits on it, and requires the council and appointing authorities to carry out specific governance, planning, reporting, and data-protection tasks.
United States — Alabama
1 provisions
This chapter does not apply to many listed entities and kinds of data, and controllers/processors complying with COPPA verifiable parental consent are treated as compliant with the chapter’s parental-consent obligation.
United States — Alabama
1 provisions
This provision defines what can count as a protectable interest, including trade secrets, confidential information, certain business relationships and goodwill, and some specialized training. It also says job skills alone are not protectable interests.
United States — Alabama
1 provisions
The department must set up and run discharge data systems, and hospitals must submit discharge data starting April 1, 2022 and then quarterly.
United States — Alabama
1 provisions
The commission must provide for information-sharing to administer and implement the compact, following the commission’s rules and generally accepted data protection principles.
United States — Alabama
1 provisions
Patient data submitted by a hospital under this article stays confidential and privileged from discovery, with limited exceptions.
United States — Alabama
1 provisions
Controllers must limit collection, use reasonable data security, give opt-out and privacy notice mechanisms, and avoid certain data-processing and pricing practices.
United States — Alabama
1 provisions
The Alabama Department of Corrections must give quarterly reports to the Joint Legislative Prison Oversight Committee and post the report on its website within 10 days after delivery to the committee.
United States — Alabama
1 provisions
The Health Care Information and Data Advisory Council is established to advise SHPDA, review reports or publications before release, and consult on protecting, collecting, and disseminating health care reports.
United States — Alabama
1 provisions
This section bars lawsuits arising from compliant conduct under the article and protects good-faith reporting or receiving of specified cancer registry data; it also says the article does not cover unauthorized disclosures caused by gross negligence or willful misconduct.
United States — Alabama
1 provisions
The commissioner may require regulated insurers to file data or information, and confidential filings stay protected unless a court order allows release.