HB 427 expands Alabama's "Do Not Call" database to include commercial and cellular phone subscribers, not just residential ones. It bans misleading caller ID information, restricts calls to between 8 a.m. and 8 p.m., and limits solicitation calls to three per 24 hours per person. The bill increases penalties for violations from $2,000 to $20,000 per offense and allows consumers to seek up to $20,000 in damages per violation. Violations would also be classified as deceptive trade practices under Alabama law.
HB 347 creates a private right of action for individuals depicted in non-consensual intimate images (so-called "illicit material") that were recklessly produced or disclosed on websites, apps, or through "nudification applications" (software designed to generate non-consensual nude imagery). It requires websites and apps to establish a process for removing such material and post clear notices about this process. The bill holds tech developers or providers liable if they recklessly design, market, or operate tools that enable non-consensual image sharing, including nudification apps. The Alabama Attorney General can enforce these provisions and impose penalties for violations.
HB 351, the Alabama Personal Data Protection Act, grants Alabama residents specific rights over their personal data. It allows consumers to confirm if their data is being processed, correct inaccuracies, request deletion, obtain copies of their data, and opt out of data processing. Businesses (referred to as "controllers") must establish secure methods for consumers to exercise these rights and create appeal processes for denied requests. The bill also regulates how businesses handle deidentified data and authorizes the Attorney General to enforce these rules.
HB 263 prohibits Alabama businesses and organizations (covered entities) from sharing or using consumers' biological data (like genetic or physiological information) or neural data (nervous system measurements) without the consumer's specific, prior written consent. It requires entities to notify consumers before any data transfer or use and allows consumers to block such actions. The Attorney General's Consumer Interest Division can enforce the law, imposing $3,000 civil penalties per violation for non-compliance. This bill directly affects Alabama residents whose data is handled by companies in sectors like health tech, fitness trackers, or medical services.
HB 280 establishes the Alabama Health Command, an independent agency, to designate a virtual AI-assisted health platform for rural communities. The platform would provide non-diagnostic health management services - such as wellness education, appointment scheduling, and follow-up assistance - via an avatar-based system, connecting rural patients with local providers without diagnosing or treating medical conditions. The agency must set standards for patient privacy, data security, and preventing the platform from substituting for licensed medical care. Rural hospitals and clinics using this platform would be exempt from competitive bidding requirements, and the bill would take effect on October 1, 2026.
HB 171 would require social media platforms to implement age verification or obtain parental consent before allowing minors under 18 to access algorithmically curated content streams ("addictive feeds"). It prohibits platforms from sending notifications to minors between midnight and 6 a.m. and mandates disclosure of how algorithms prioritize content. The bill authorizes Alabama's Attorney General to enforce these rules, allowing platforms to correct violations before legal action. This legislation directly affects social media operators hosting such feeds in Alabama and applies to users under 18, though it remains pending committee review.
HB 219, the Access & Responsible Digital Safety Act, requires app stores (like Apple App Store or Google Play) to verify user ages when accounts are created and provide age information to app developers. It mandates that app developers must offer different experiences for minors versus adults, block minors from accessing restricted content without parental consent, and stop advertising to children. Parents gain tools to manage their children's app access, and app stores must share age data with developers only for safety purposes. Violations could trigger civil penalties enforced by the Attorney General, while app stores making good-faith efforts face limited liability. The bill directly affects app stores, developers, and parents of minors using mobile applications.
HB 327 is a consumer protection bill prohibiting businesses from using a person's voice or image in a digital replica for commercial purposes without their written consent. It creates a private right for individuals to sue if their likeness is used without authorization, while allowing exceptions for news, commentary, satire, and short, non-commercial uses. The law also establishes that rights to control digital replicas last 10 years after a person's death (with possible 5-year renewals) but cannot exceed 50 years total. This directly affects individuals whose likenesses might be replicated and businesses creating or using such digital representations.