Can I store personal information about my customers in Alabama? What are the requirements?

Here is the response to your query:

Storing Personal Information of Customers in Alabama

If you are planning to store personal information about your customers in Alabama, you must comply with the state’s privacy laws. The Alabama Administrative Code (ALAC) Section 482-1-122-.06 requires a licensee to provide a clear and conspicuous notice to customers that accurately reflects its privacy policies and practices not less than annually during the continuation of the customer relationship. The licensee must define the twelve-consecutive-month period, but it shall apply it to the customer on a consistent basis. A licensee is not required to provide an annual notice to a current customer so long as both of the following are true: (1) The licensee provides personal information to nonaffiliated third parties only in accordance with Rules 482-1-122-.15, 482-1-122-.16 and 482-1-122-.17. (2) The licensee has not changed its policies and practices with regard to disclosing nonpublic personal information from the policies and practices that were disclosed in the most recent disclosure sent to consumers in accordance with Rule 482-1-122-.05 or Rule 281-1-122-.06.

Requirements for Storing Personal Information

If you store personal information about your customers in Alabama, you must comply with the following requirements:

1. Provide an annual privacy notice to customers that accurately reflects your privacy policies and practices.
2. Define the twelve-consecutive-month period and apply it to the customer on a consistent basis.
3. Provide personal information to nonaffiliated third parties only in accordance with Rules 482-1-122-.15, 482-1-122-.16 and 482-1-122-.17.
4. Do not change your policies and practices with regard to disclosing nonpublic personal information from the policies and practices that were disclosed in the most recent disclosure sent to consumers in accordance with Rule 482-1-122-.05 or Rule 281-1-122-.06.

Limits on Sharing Account Number Information for Marketing Purposes

A licensee shall not, directly or through an affiliate, disclose, other than to a consumer reporting agency, a policy number or similar form of access number or access code for a consumer’s policy or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to the consumer ^[1.7].

Conclusion

You can store personal information about your customers in Alabama, but you must comply with the state’s privacy laws. You must provide an annual privacy notice to customers, define the twelve-consecutive-month period, and provide personal information to nonaffiliated third parties only in accordance with the rules. Additionally, you cannot disclose a policy number or similar form of access number or access code for a consumer’s policy or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to the consumer. If you do not comply with these requirements, you may face legal consequences.

Source(s):

• [1.7] Limits On Sharing Account Number Information For Marketing Purposes

Jurisdiction

Alabama

• Privacy