Ala. Code § 8-19G-4: Retention of Personally Identifying Information Prohibited.

(a) Any commercial entity or third party that performs the required age-verification under Section 8-19G-3 shall not retain any personally identifying information of the individual after access has been granted to the sexual material.

(b) A commercial entity that is found to have knowingly retained identifying information of the individual, as prohibited in subsection (a), shall be liable to the individual for damages resulting from retaining the identifying information, including court costs and reasonable attorney fees as ordered by the court.

(c) Nothing in this section shall apply to a bona fide news-gathering organization.