Alaska data breach notification law

Who must notify and when

without unreasonable delay Alaska requires businesses to notify

Attorney general notice

notifications on a public website?

What counts as a breach

In Alaska 'breach of the security' means unauthorized acquisition, or reasonable belief of unauthorized acquisition, of personal information that compromises the security, confidentiality, or integrity of the personal information maintained by the information collector; acquisition includes acquisition by photocopying, facsimile, or other paper-based method; a device, including a computer, that can read, write, or store information that is represented in numerical form; or a method not identifie

What counts as personal information

In Alaska 'personal information' means information in any form on an individual that is not encrypted or redacted, or is encrypted and the encryption key has been accessed or acquired, and that consists of a combination of an individual's name (first name or first initial and last name) and one or more of the following: social security number; driver's license number or state identification card number; account number, credit card number, or debit card number; if an account can only be accessed

Coverage and remedies

"Not extracted" means the field was not captured in our PRC 2026 summary; check the statute.

HIPAA breaches reported in Alaska

32 reports to HHS OCR affecting 925,719 individuals. Most common type: Hacking/IT Incident. See all HIPAA breaches in Alaska.

Frequently asked questions