Skip to content
Use promo code: Xi8TJRBw at checkout for 20% Off 🎉 with Optery’s Labor Day Sale! 🎇

Alaska

Privacy Law Status

Comprehensive Privacy Law

Alaska currently does not have a comprehensive consumer data privacy law. While Governor Mike Dunleavy introduced the Consumer Data Privacy Act in March 2021, which would have provided strong privacy rights similar to California’s law, this legislation ultimately failed to pass[1][2][3]. Alaska residents therefore lack many of the privacy protections that citizens in states like California, Virginia, and Colorado now enjoy.

The state’s primary privacy protection comes from the Alaska Personal Information Protection Act (APIPA), enacted in 2009, which focuses narrowly on data breach notifications and identity theft protections rather than comprehensive consumer privacy rights[4][5]. This leaves significant gaps in privacy protection for Alaska residents in the digital age.

Legislative Activity

The most significant recent privacy legislation attempt was Governor Dunleavy’s Consumer Data Privacy Act (SB 116, HB 159), introduced in March 2021. This comprehensive bill would have granted Alaska residents four key rights: the right to know when personal information is collected, the right to disclosure of collected data, the right to delete personal information, and the right to opt out of data sales[1][6]. The legislation also included strong protections for minors and data broker registration requirements.

Despite initial promise, these privacy bills failed during the 2022 legislative session[2]. Representative Rauscher pre-filed HB 222 on January 1, 2022, indicating further privacy legislative activity beyond the 2021 bills.

Implementation Timeline

There is currently no implementation timeline for comprehensive data privacy protections in Alaska, as no such legislation has been enacted. The failed 2021 Consumer Data Privacy Act would have taken effect on January 1, 2023, had it passed[6]. In 2024, Alaska did enact insurance-specific cybersecurity requirements under SB 134, with staggered effective dates from 2025 to 2027, but these protections apply only to the insurance industry[7].

Alaska residents continue to rely primarily on federal privacy laws and the limited protections of APIPA, which has been in effect since July 1, 2009[5]. Without new legislative action, Alaska will likely remain among the states without comprehensive consumer privacy protections.

Your Rights as an Alaska Resident

Unfortunately, Alaska residents have very limited privacy rights compared to citizens in states with comprehensive privacy laws. Under current Alaska law, your rights are restricted to those provided by the Alaska Personal Information Protection Act and federal regulations.

  • Right to breach notification: Companies must notify you if your personal information is compromised in a data breach, but only after the breach has already occurred[4][5]
  • Right to credit report security freeze: You can place a freeze on your credit report to prevent unauthorized access, which helps protect against identity theft[4][5]
  • Right to identity theft protections: Victims of identity theft can petition courts for determinations of factual innocence and file police reports even in jurisdictions without direct authority[5]
  • Right to social security number protections: Limited restrictions exist on how businesses can use and disclose your social security number[5]
  • Right to truncated payment information: Businesses cannot print more than the last four digits of your credit or debit card number on receipts[5]

Notably absent are many rights that residents of other states enjoy, including the right to know what data companies collect about you, the right to delete your personal information, the right to opt out of data sales, and the right to correct inaccurate information. Alaska residents also lack protection from discrimination for exercising privacy rights.

Business Requirements

Alaska’s business requirements for data protection are minimal compared to comprehensive privacy states, focusing primarily on breach response rather than proactive privacy measures.

  • Breach notification obligations: Businesses must notify affected individuals when personal information is compromised in a security breach, with specific timing and content requirements[4][5]
  • Social security number restrictions: Businesses face limitations on collecting, using, and disclosing social security numbers, with criminal penalties for knowing violations[5]
  • Payment card information limits: Retailers cannot print more than the last four digits of credit or debit card numbers on receipts, with penalties up to $3,000 plus damages for violations[5]
  • Record disposal requirements: Businesses must properly dispose of records containing personal information according to state regulations[4][5]
  • Insurance industry specific requirements: Insurance companies must comply with additional cybersecurity standards under SB 134, effective in phases from 2025-2027[7]

Practical Impact

  • Limited daily protection: Alaska residents receive minimal protection for their digital privacy in everyday online activities, data collection by social media companies, or sales of personal information to data brokers
  • Reactive rather than proactive: Current laws primarily respond to privacy violations after they occur through breach notifications, rather than preventing data misuse in the first place
  • Enforcement limitations: Privacy violations are handled through the Consumer Protection Unit as unfair or deceptive practices, but this provides limited recourse for individual privacy harms[8]
  • Identity theft focus: The strongest protections center on identity theft prevention and response, reflecting the law’s 2009 origins before modern data privacy concerns became prominent
  • Federal law dependency: Alaska residents must rely heavily on federal privacy laws, which often have significant limitations and enforcement gaps

Comparison Context

  • Lagging behind privacy leaders: Unlike California, Virginia, Colorado, and other comprehensive privacy states, Alaska residents cannot access their data, delete personal information, or opt out of data sales
  • Missing modern protections: Alaska lacks the data minimization requirements, purpose limitations, and consent frameworks that characterize leading state privacy laws
  • No data broker oversight: While the failed 2021 legislation would have required data broker registration, Alaska currently has no oversight of companies that buy and sell personal information as their primary business[1][3]
  • Limited business accountability: Alaska businesses face fewer privacy compliance requirements than their counterparts in comprehensive privacy states, potentially disadvantaging Alaska consumers
  • Weak enforcement mechanisms: Alaska lacks the dedicated privacy enforcement authority and civil penalty structure found in leading privacy states

Action Steps for Residents

  • Maximize federal protections: Understand and exercise your rights under federal laws like the Fair Credit Reporting Act, Health Insurance Portability and Accountability Act, and Federal Trade Commission Act
  • Use available state protections: Place security freezes on credit reports, monitor for data breach notifications, and report identity theft promptly to law enforcement[5]
  • Practice digital self-defense: Use privacy settings on social media, limit personal information sharing, and consider privacy-focused alternatives to data-collecting services
  • Engage in advocacy: Contact state legislators to express support for comprehensive privacy legislation, referencing the failed 2021 Consumer Data Privacy Act as a starting point
  • File complaints when appropriate: Report unfair or deceptive privacy practices to the Alaska Attorney General’s Consumer Protection Unit, even though enforcement options are limited[8]
  • Stay informed on legislative developments: Monitor Alaska Legislature activities for new privacy legislation proposals, particularly during regular sessions

Official Resources and Contact Information

Alaska State Legislature

The Alaska State Legislature is where comprehensive privacy legislation would need to be introduced and passed. You can contact legislators directly about privacy concerns and track relevant bills through their online systems.

Website: https://akleg.gov

Finding Your State Representatives

To contact your specific legislators about privacy legislation, you need to identify your district representatives. You can find your legislators using your voter ID card or by calling the Division of Elections at 866-952-8683.

Legislative contact assistance: https://alaskapolicyforum.org/get-involved/contact-your-legislators/

Alaska Attorney General – Consumer Protection Unit

The Consumer Protection Unit investigates unfair or deceptive business practices and can receive complaints about privacy violations, though enforcement options under current law are limited.

Address: 1031 West Fourth Avenue, Suite 200, Anchorage, AK 99501-5903

Phone: 907-269-5200

Email: consumerprotection@alaska.gov

Website: https://www.law.alaska.gov/department/civil/consumer/cpindex.html

Complaint form: http://www.law.alaska.gov/department/civil/consumer/cp_complaint.html

Alaska Department of Law

The Department of Law houses the Consumer Protection Unit and serves as the primary state agency for legal enforcement matters.

Main office: P.O. Box 110300, Juneau, AK 99811-0300

Phone: 907-465-3600

Email: attorney.general@alaska.gov

Website: https://law.alaska.gov/department/about.html

Legislative Session Information

The Alaska Legislature meets in regular sessions where privacy legislation could be considered. Public testimony opportunities are available during committee hearings.

34th Legislature schedule: 1st Regular Session January 21 – May 20, 2025

Committee meeting information: https://akleg.gov

Public testimony and committee schedules: Available through the legislature website during active sessions

Sources and Citations

Last Updated August 2025. Written with contributions from both human authors and Perplexity AI. If you find incorrect or outdated information let us know at support@optery.com.

Ready to safeguard your personal data?

Join the movement of people strengthening their privacy
Sign Up Free