Alaska Data Privacy Regulations Overview

Mandated Timeframe for Breach Reporting and/or Consumer Notification

Without unreasonable delay

Laws related specifically to personal information

Fines & Penalties

Violations of breach and notification laws:
- from $500 per resident up to $50,000

Regulation Levels

Quick Facts

If notification is required to more than 1,000 residents, it must be reported, without unreasonable delay, to all consumer reporting agencies with specific information.
Unauthorized acquisition includes acquisition by any paper-based method, any device (including a computer) when the information is represented in numerical form, or any other method.
A business or governmental agency must adopt written policies and procedures that relate to the adequate destruction and proper disposal of records containing personal information.
After due diligence, entering into a written contract with a third party engaged in the business of record destruction to dispose of records containing personal information.
An individual, a business, or a governmental agency that knowingly violates Article 4 Disposal of Records is liable to the state for a civil penalty not to exceed $3,000.
Written notification to the state attorney general is required prior to the notification decision.
If your breach affects residents in other states, you will need to notify those residents using that state’s rules.
If an information recipient (vendor) is breached, they must report it to the information collector (data owner). The data owner will be responsible to compete the reporting and consumer notification.

Statutes and Laws

Alaska