{"data":{"id":"us-al/ala.-code-8-38-12","jurisdiction":"us-al","citation":"Ala. Code § 8-38-12","heading":"Exemptions - State.","body":"An entity subject to or regulated by state laws, rules, regulations, procedures, or guidance on data breach notification that are established or enforced by state government, and are at least as thorough as the notice requirements provided by this chapter, is exempt from this chapter so long as the entity does all of the following:\n(1) Maintains procedures pursuant to those laws, rules, regulations, procedures, or guidance.\n(2) Provides notice to affected individuals pursuant to the notice requirements of those laws, rules, regulations, procedures, or guidance.\n(3) Timely provides a copy of the notice to the Attorney General when the number of individuals the entity notified exceeds 1,000.","path":["Title 8 Commercial Law and Consumer Protection.","Chapter 38 Data Breach Notification Act of 2018."],"source_url":"https://alison.legislature.state.al.us/code-of-alabama?section=8-38-12","current_through":"Act 2026-611","vintage":"","retrieved_at":"2026-09-03T14:01:53Z","sha256":"565d9462aff43c86d5de04d3878e89b0fe455b3df15f186e485541e4c3b82b11","source_id":"us-al","stale":false,"prev":"us-al/ala.-code-8-38-11","next":"us-al/ala.-code-8-39-1"},"notice":"GroundRules: Original legal text. Not legal advice."}