What Businesses Need to Know About the Alabama Personal Data Protection Act

In April 2026, Alabama enacted the Alabama Personal Data Protection Act (APDPA), making it the 22nd U.S. state to adopt a broad consumer privacy law governing how organizations collect, use, and disclose personal data. While the APDPA reflects many elements common to other state privacy frameworks, it also stands out for several business‑friendly features, including broad exemptions, a permanent cure period, and narrower operational obligations than those imposed by some other state laws...... By: Davis Wright Tremaine LLP