Alaska Privacy Law Overview

Alaska has not enacted a comprehensive consumer privacy law. Privacy protections for Alaska residents come primarily from the state's data-breach notification statute, its consumer-protection law, and the federal privacy framework. Businesses operating in Alaska should focus on breach preparedness and on the federal sector rules — health, financial, education — that apply to them, while watching the comprehensive-privacy legislation spreading to neighboring states.

Sector-Specific Privacy Laws in Alaska

Alaska Consumer Protection Act

Alaska's consumer-protection statute prohibits unfair and deceptive trade practices, which the Attorney General can use against businesses that misrepresent how they collect, use, or secure personal information.

Data Breach Notification in Alaska

Alaska's data-breach notification law requires businesses to notify affected residents when unencrypted personal information is acquired by an unauthorized person.

  • Deadline to notify residents: In the most expeditious time possible without unreasonable delay
  • Attorney General notice: Notify the Alaska Attorney General if more than 1,000 residents are affected
  • Covered data: Name combined with sensitive identifiers (SSN, driver's license, financial-account or medical information, and more)

Pending Privacy Legislation

No comprehensive consumer-privacy bill has been enacted in Alaska as of June 2026.

Federal Privacy Laws That Apply in Alaska

Even where Alaska law is silent, residents and businesses are covered by federal privacy statutes:

  • HIPAA — health information held by providers, plans and their vendors
  • GLBA — privacy and safeguards rules for financial institutions
  • FERPA — student education records
  • FCRA — consumer reporting agencies and background screening
  • COPPA — online collection of data from children under 13
  • FTC Act §5 — unfair or deceptive privacy and data-security practices

Industry-Specific Privacy Requirements in Alaska

Many Alaska businesses face privacy obligations that flow from their industry rather than from a single state statute:

Healthcare

Providers, health plans and their vendors must comply with HIPAA and with any state medical-confidentiality rules when handling patient information in Alaska.

Financial Services

Banks, credit unions, lenders and insurers are subject to the Gramm-Leach-Bliley Act privacy and safeguards rules in addition to Alaska consumer-protection requirements.

Technology & Online Services

Companies serving users in other states may owe duties under California's CCPA/CPRA and other comprehensive laws even while Alaska itself has none — making multi-state compliance the practical reality for most online businesses.

Retail

Retailers handling payment-card data must meet PCI DSS contractual standards and Alaska's breach-notification law if customer information is exposed.

Where to File a Privacy Complaint in Alaska

Alaska residents who believe a business has mishandled their personal information can file a complaint with the Alaska Attorney General, which enforces the state's consumer-protection and data-breach laws. Complaints involving federally regulated data — health, financial, credit or children's information — can also be directed to the Federal Trade Commission or the relevant federal regulator. An attorney can help you assess whether you have a claim and choose the best venue to pursue it.

Alaska Privacy Law FAQ

Does Alaska have a comprehensive consumer privacy law?
No. As of June 2026, Alaska has not enacted a CCPA-style comprehensive privacy law. Alaska residents are protected by the state's data-breach notification statute and consumer-protection act, together with federal privacy laws such as HIPAA, GLBA, FCRA and the FTC Act.
What should a Alaska business do to protect customer data?
Focus on the fundamentals: maintain reasonable security safeguards, identify which federal sector rules apply to your industry, keep a written incident-response plan ready to meet Alaska's breach-notification requirements, and describe your data practices accurately to avoid consumer-protection liability.

How a Alaska Privacy Attorney Can Help

For Businesses

  • Build and audit a privacy compliance program
  • Draft privacy policies, notices and vendor contracts
  • Respond to consumer rights requests
  • Manage data-breach response and notification
  • Defend regulatory investigations and enforcement

For Consumers

  • Enforce your privacy rights against non-compliant businesses
  • Pursue or join data-breach litigation
  • File complaints with the Alaska Attorney General
  • Seek damages for identity theft and fraud
  • Stop unlawful data sales and unwanted marketing

Need a Alaska Privacy Attorney?

Whether you are a business working toward compliance or a Alaska resident whose privacy has been violated, our network of Alaska-licensed attorneys can help.

Find a Alaska Privacy Attorney