Law / Alaska

Alaska

age

Alaska has no age verification, social media minor access, app store, or design code law in effect as of July 2026. A 2024 bill combining pornography age verification with a social media ban for users under 14 passed the House but died in a Senate committee.

A 2026 bill on AI generated child sexual abuse material originally added social media age verification and parental consent requirements after passing the House unanimously, but a Senate committee stripped those provisions in April 2026 over First Amendment and single subject concerns, leaving only the criminal AI content provisions moving forward.

privacy

Alaska has no comprehensive consumer-privacy statute. Article I, Section 22 of the Alaska Constitution recognizes an explicit right of privacy, but the provision's own text directs the legislature to implement it, and Alaska courts have read it as binding government action rather than private conduct, so a private business is not directly bound by it.

The Alaska Personal Information Protection Act (PIPA), AS 45.48.010 to 45.48.090, is the state's operative private-sector privacy statute, a breach notification duty whose personal information definition covers only a name combined with a Social Security number, a driver's license or state ID number, or a financial account number and access code, with no biometric, genetic, or health category of any kind.

A PIPA violation by a non-governmental information collector is deemed an unfair or deceptive act or practice under Alaska's general Unfair Trade Practices and Consumer Protection Act, which arms a private plaintiff with an action for actual economic damages (capped at $500 under one of the two cross-referenced remedy provisions) in addition to a state civil penalty of up to $500 per unnotified resident, capped at $50,000 total.

A comprehensive Consumer Data Privacy Act, HB 367, remains in committee as of this writing and has not passed either chamber.

8 instruments named 2 researched in detail As of 2026-08-27

Instruments

Each one links to its LexLint note, which carries what it requires and what it flags on.

Breach notification

Alaska Personal Information Protection Act, breach notification duty

cite Alaska Stat. Secs. 45.48.010-45.48.070 stage IMMINENT commencement not set source official Alaska Statutes text, Alaska State Legislature

A covered person (a person doing business, a governmental agency, or a person with more than 10 employees) that owns or licenses personal information on an Alaska resident must, after discovering or being notified of a breach of the security of the information system containing it, disclose the breach to each affected resident in the most expeditious time possible and without unreasonable delay.

Disclosure is not required if, after an appropriate investigation and written notice to the Alaska Attorney General, the covered person determines there is no reasonable likelihood of harm, a determination that must be documented and kept for five years.

Personal information covers only a name combined with a Social Security number, driver's license or state ID number, or a financial account, credit card, or debit card number with any needed access code; biometric, genetic, and health data are absent from the definition entirely, so a breach of biometric data alone triggers no notice duty under this Act.

What it asks of an app →

Enforcement supervision

Alaska Personal Information Protection Act, violations and enforcement

cite Alaska Stat. Sec. 45.48.080 stage IMMINENT commencement not set source official Alaska Statutes text, Alaska State Legislature

A governmental agency that violates the breach notification duty is liable to the state for a civil penalty of up to $500 per unnotified resident (capped at $50,000) and may be enjoined, enforced by the Department of Administration.

A non-governmental information collector's violation is instead deemed an unfair or deceptive act or practice under Alaska's Unfair Trade Practices and Consumer Protection Act (AS 45.50.471-45.50.561), which arms a private plaintiff, but this Act caps what that private plaintiff may recover: damages under the Act's general private and class action provision (AS 45.50.531, ordinarily treble damages or $500, whichever is greater) are limited here to actual economic damages not exceeding $500, and damages under the Act's fees-and-costs provision (AS 45.50.537) are limited to actual economic damages.

The non-governmental violator is also liable to the state for the same $500-per-resident, $50,000-total civil penalty as a governmental agency, though not the Act's ordinary civil penalties.

What it asks of an app →

This summary covers the instruments LexLint has researched to a stage. Instruments named in the corpus but not yet researched are counted above and are not listed here. Every entry carries its own primary source on its note page. This is a research index, not legal advice.