Alabama Personal Data Protection Act (from May 1, 2027)
Signed in April 2026 and taking effect May 1, 2027. It exempts businesses with fewer than 500 employees as long as they do not sell personal data, so most Alabama small businesses fall outside it. Your attorney confirms whether it applies to you.