Biological and neural data; certain disclosures, transfers, and use by a covered entity prohibited unless consumer provides express consent, Attorney General authorized to enforce, civil penalties provided

HB 436 prohibits businesses (covered entities) in Alabama from sharing or using consumers' biological or neural data - like genetic information or brain activity data - without the consumer's explicit written or electronic consent. It bans using this data for marketing, transferring it to third parties without permission, or employing it beyond what's necessary for the services the consumer requested. Businesses must notify consumers before any data transfer or use and allow them to block it. The Alabama Attorney General's Consumer Interest Division can enforce the law and impose $3,000 penalties per violation, effective October 1, 2025.