If a covered entity discovers circumstances requiring notice under Section 8-38-5 of more than 1,000 individuals at a single time, the entity shall also notify, without unreasonable delay, all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined in the Fair Credit Reporting Act, 15 U.S.C. ยง1681a, of the timing, distribution, and content of the notices.
Structure Code of Alabama
Title 8 - Commercial Law and Consumer Protection.
Chapter 38 - Data Breach Notification Act of 2018.
Section 8-38-3 - Reasonable Security Measures; Assessment.
Section 8-38-4 - Investigation of Security Breach.
Section 8-38-5 - Notice of Security Breach - Individuals Affected.
Section 8-38-6 - Notice of Security Breach - Attorney General.
Section 8-38-7 - Notice of Security Breach - Consumer Reporting Agencies.
Section 8-38-8 - Notice of Security Breach - Covered Entity.
Section 8-38-9 - Violations of Notification Requirements.
Section 8-38-10 - Disposal of Records Containing Sensitive Personally Identifying Information.