Alaska2026Passed Legislature
HB367
Consumer Data Privacy Act
Last scannedSep 10, 2026, 12:32 AM
In one sentence
This law creates new rules for how businesses handle personal data, gives residents rights over their information, and requires certain companies to register with the state.
What it does
- Creates a list of consumer rights that include confirming what data is collected, correcting errors, deleting data, getting copies of data in a usable format, and opting out of targeted ads or data sales.
- Requires businesses meeting specific size thresholds to follow these new privacy rules if they do business in Alaska or target Alaskan residents.
- Establishes a registry where data brokers must register with the state attorney general's office.
- Adds exceptions that allow government agencies, banks, and credit reporting companies to share social security numbers for legal duties like background checks or fraud prevention.
- Prohibits businesses from treating people differently based on race, religion, gender, or other protected traits when handling their personal data.
Who it affects
- Businesses that collect the personal data of at least 35,000 consumers in a year.
- Businesses that collect data from at least 10,000 consumers and earn more than 20% of their revenue by selling personal data.
- Data brokers who must register with the state under new requirements.
- Alaska residents whose personal information is collected or processed by covered businesses.
Limits and unknowns
- This law does not apply to the federal government, state agencies, public schools, universities, cities, tribal governments, or other public entities.
- The provided text ends before listing all technical details about how consumers can send opt-out signals through their browsers or devices.
Plain language
Terms to know
- Controller
- A business that decides why and how to collect, use, or share a consumer's personal data.
- Data Broker
- A person or company in the business of collecting and selling consumers' personal information for others to use.
- Opt Out
- The right of a consumer to say no to having their data used for targeted advertising, sold, or used for automated decisions that affect them legally.
Official record
Sources
Official summary
CONSUMER DATA PRIVACY ACT An Act relating to the privacy of consumer personal information; establishing the Consumer Personal Information Privacy Act; establishing data broker registration requirements; relating to social security numbers; making certain violations unfair or deceptive trade practices; and providing for an effective date.
Official activity
Bill history
- (H) REFERRED TO FINANCE2505
- (H) FN2: (LAW)2505
- (H) FN1: INDETERMINATE(CED)2505
- (H) AM: COSTELLO, UNDERWOOD2505
- (H) DP: MINA, EISCHEID, GRAY2505
- (H) JUD RPT CS(JUD) NEW TITLE 3DP 2AM2505
- (H) Moved CSHB 367(JUD) Out of CommitteeText
- (H) JUDICIARY at 01:00 PM GRUENBERG 120Text
- (H) Heard & HeldText
- (H) JUDICIARY at 01:00 PM GRUENBERG 120Text
- (H) Heard & Held -- Delayed to 1:35 PM --Text
- (H) JUDICIARY at 01:00 PM GRUENBERG 120Text
- (H) <Bill Hearing Canceled> -- MEETING CANCELED --Text
- (H) JUDICIARY at 01:00 PM GRUENBERG 120Text
- (H) Heard & HeldText
- (H) JUDICIARY at 01:00 PM GRUENBERG 120Text
- (H) JUD, FIN1693
- (H) READ THE FIRST TIME - REFERRALS1693