McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
Business Home → Products & Solutions → Data Protection → US & Global Data Protection Laws → Security Breach Notification Laws

Alaska

Personal Information Protection Act
CITATION Alaska Stat. § 45.010 et seq.
ENACTED 2007
SUMMARY Provides breach notification requirements, restrictions on use of Social Security numbers, and allows consumers to place a security freeze on their credit reports. Notification of a breach is not required if, after an appropriate investigation and written notification to Alaska’s attorney general, the covered entity determines that there is not a reasonable likelihood that harm to consumers has resulted or will result from the breach.
DATA COVERED

The Act applies to ‘Personal Information’ which is defined as personal information on an individual that is not encrypted or redacted, or is encrypted and the encryption key has been accessed or acquired, and that consists of a combination of an individual’s name, which includes a combination of and individual’s first name or first initial and last name and one or more of the following information elements:

  1. The individual’s Social Security number;
  2. The individual’s driver’s license number or state identification card number;
  3. The individual’s account number, credit card number or debit card number;
  4. A security access code, a personal identification number or a password;
  5. Passwords, personal identification numbers or other access codes for financial accounts.
INDUSTRY The Act applies to any person or entity that is doing business in Alaska or a governmental agency or a person with more than 10 employees and who collects information on Alaska state residents.
PENALTIES If a governmental entity that is an information collector breaches the statute, it is liable to the State for a civil penalty of up to five hundred dollars ($500) for each resident who was not notified. The civil penalty cannot exceed fifty thousand dollars ($50,000). An information collector that is not a governmental entity is liable to the State for a civil penalty of up to five hundred dollars ($500) for each resident (not to exceed $50,000) and is liable for damages that may be awarded to plaintiffs for actual damages not to exceed five hundred dollars ($500).
United States - English