HB 351 (2026)
Alabama's comprehensive consumer privacy law, signed April 17, 2026 and effective May 1, 2027. Applies to controllers processing data of 25,000+ Alabama residents. Grants rights to access, delete, correct, and opt out of data sales and targeted advertising. Requires data minimization, privacy notices, and written vendor agreements. EdTech vendors serving Alabama districts must audit data flows and DPAs before the May 2027 compliance deadline.