That's All Folks! Alabama Becomes 50th State With Breach Notification Law

On March 28, 2018, Alabama Gov. Kay Ivey signed a bill that made Alabama the 50^th and final state to enact a consumer data breach notification law. Prior to the signing, Alabama had been the last remaining state without such a law after South Dakota passed its data breach law last month.

So what do you need to know about the new Alabama data breach notification law before it takes effect on May 1, 2018:

• The law applies to all "covered entities" which the law defines as "a person, sole proprietorship, partnership, government entity, corporation, nonprofit, trust, estate, cooperative association or other business entity that acquires or uses sensitive personally identifying information. "The law also applies to any "third-party agents" of covered entities where such a third-party agent is defined as "an entity that has been contracted to maintain, store, process, or is otherwise permitted to access sensitive personally identifying information in connection with