Alabama AI and Privacy Laws

What the law says

SB 63, effective October 1, 2026, requires that any health plan decision to deny, delay, or modify a prior authorization on medical necessity grounds be made by a licensed physician or qualified health professional, and requires plans to disclose AI use in utilization review.

The Alabama Personal Data Protection Act, signed in April 2026 and effective May 1, 2027, gives consumers access, correction, deletion, and portability rights and the right to opt out of targeted advertising, data sales, and profiling for solely automated significant decisions.

Key dates

What this means for your organization

This state regulates specific uses of AI rather than AI in general. Check whether any of your AI uses fall into the categories above, such as chatbots, synthetic media, or AI in health coverage decisions, and remember that federal law and the laws of other states where you operate may also apply.

Our 2027 AI Governance Checklist covers the steps most organizations need, and our State AI Law Trackers explain the rules for specific industries.

Other states in this category

• Alaska
• Arizona
• Arkansas
• California
• Florida
• Georgia
• Hawaii
• Idaho
• Illinois
• Indiana
• Iowa
• Kansas
• Louisiana
• Maine
• Massachusetts
• Michigan
• Minnesota
• Mississippi
• Montana
• Nebraska
• Nevada
• New Hampshire
• New Jersey
• New Mexico
• New York
• North Dakota
• Oregon
• Pennsylvania
• Rhode Island
• South Carolina
• South Dakota
• Tennessee
• Texas
• Utah
• Washington
• Wisconsin
• Wyoming

See every state on the AI Laws by State map.

This page is general information for planning purposes. Laws and guidance change, so confirm current requirements before acting. It is not legal advice. For legal advice about your organization, consult a licensed attorney.