Key Facts
Penalties
AG-enforced; no private right of action.
Data Subject Rights
Confirm whether a controller, or a processor or third party acting for it, is processing your personal data and access that data, unless doing so would require the controller to reveal a trade secret.
Correct inaccuracies in your personal data, considering the nature of the data and the purposes of the processing.
Direct a controller to delete your personal data; for data obtained from other sources, the controller may instead keep a minimal record to keep it deleted or opt you out of further processing.
Where processing is automated, obtain a copy of the personal data you previously provided in a portable and, where technically feasible, readily usable format you can transmit to another controller, unless that would reveal a trade secret.
Opt out of the processing of your personal data for targeted advertising, meaning ads selected from your activity over time across nonaffiliated websites or apps.
Opt out of the sale of your personal data, which the act defines to exclude, among other things, disclosures to processors or affiliates, disclosures to third parties for analytics services, and disclosures for marketing services provided solely to the controller.
Opt out of profiling in furtherance of solely automated significant decisions, meaning decisions that provide or deny credit or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunity, health care services, or access to basic necessities such as food or water.
Revoke any consent you gave under the act through a mechanism at least as easy as the one you used to give it, after which the controller must stop processing the data.
A controller may not deny goods or services, charge different prices or provide a different quality because you opted out, though it need not provide a service that requires the processing and may run bona fide loyalty, rewards, premium features, discount or club card programs.
US State Specifics
Other North America Regulations
Stay compliant with APDPA
ConsentStack helps you implement Opt-out consent for Alabama, United States automatically.