Introduction to Alaska’s CDPA
On March 31, 2021 Alaska Governor Mike Dunleavy announced the Consumer Data Privacy Act, a privacy bill designed to protect Alaskans’ personal information protection with rights similar to those provided by California’s CCPA. If passed, the bill will become effective on January 1, 2023.
While the Alaska CDPA was introduced after California’s passage by referendum of the certain revisions to the CCPA known as the California Privacy Rights Act (CPRA), which are not yet effective in California, the CDPA is based solely on the CCPA and it does not include any of the updates from the CPRA, such as the right to correct personal information.
You can find the full text of Alaska’s CDPA in the Senate bill here, which is identical to the House bill found here. Note that Virginia recently passed its own law called CDPA, which is also based on the CCPA.
What Consumer Rights Does CDPA Provide?
The Alaska CPDA provides the same four core consumer rights as CCPA, namely:
- The right to know
- when a business collects personal information about them.
- The right to disclosure
- regarding what personal information a business has collected about them during the last five years, and if a business has sold or disclosed that information to third parties.
- The right to deletion
- of personal information that businesses have collected within the last five years.
- The right to opt-out
- of businesses from selling their personal information.
What Contact Methods Must Businesses Provide to Consumers to Enable them to Exercise their Alaska CDPA Rights?
Businesses must offer consumers at least two methods to submit a privacy request, including both a toll-free telephone number (also known as a privacy hotline) and an e-mail address. Businesses that publish a website must also provide a website form for submitting requests, which must be on a public-facing page (i.e. no login required to access the form). Businesses may also accept requests by postal mail or any other method that is “consumer friendly.”
The Alaska privacy law would also require businesses to publish a “Do not sell or collect my personal information” link on their websites. Note the addition of “or collect” in the AK law as compared to the CA law.
For businesses that want to plan ahead for Alaska’s CDPA law, or that perhaps haven’t yet prioritized CCPA compliance, CCPA Toll Free offers a simple and comprehensive solution to accept toll-free number privacy requests for CDPA and CCPA alike. As with the CCPA, the CDPA provides businesses 45 days to respond to toll-free number requests, so there is no need to staff a call center to comply with the law. CCPA Toll Free’s automated compliance solution enables businesses to receive toll-free number requests in a structured manner, organized in a secure dashboard, with convenient email alerts and reminders to help you respond on time.
CCPA Toll Free also provides businesses with a solution for “Do not sell or collect my personal information” compliance.
You can fully re-use CCPA Toll Free software to offer consumer in Alaska the same rights and capabilities. If you have any questions please contact us at support@ccpatollfree.com.
