The Alaska Legislature has enacted a comprehensive Personal Information Protection Act. The following is a discussion of the Act's main provisions.
Covered persons who own or license personal information about state residents must notify affected persons if their personal information has been subject to a breach. Notification must take place as soon as possible, except in cases when a law enforcement agency determines that notification will interfere with a criminal investigation (AK Stat. Sec. 45.48.010 et seq.).
Disclosure of a breach is not required if, after an investigation and notice to the state attorney general, the covered person determines that there is not a reasonable likelihood of harm to the consumer. This determination must be documented in writing, and the documentation must be retained for five years.