A new Alabama law requires companies hit with a data breach to notify impacted residents. Alabama is the most recent and final state to pass a data breach notification law, which will take effect May 1.

The law applies to electronically stored “sensitive personally identifying information.” This includes an Alabama resident’s first name or first initial and last name and one of the following: social security number, government issued identification number, financial account number, medical information, health insurance policy or identification, or email address and password that would allow access to an account containing any sensitive personally identifying information. While there are some exceptions, notification to residents affected by a breach must be made within 45 days.

Learn more here or contact our team at info@teklinks.com