On May 1, 2018, Alabama law number 2018-396 will be in effect.with the following requirements:

• Notify the Alabama Attorney General and credit agencies of a breach which involved over 1,000 residents
• Notify each affected Alabama resident
• All entities subject to this law must implement and maintain reasonable security measures to protect sensitive PII against a security breach
• Each covered entitiy should conduct a good faith and prompt investigation of a breach that has or may occur related to PII
• 3rd parties must notify covered entities of a breach involving PII