What is the data breach notification deadline in Alaska?

Alaska requires notice to affected individuals in the most expedient time possible and without unreasonable delay (Alaska Stat. §45.48.010 et seq.).

Do you have to notify the Alaska Attorney General of a data breach?

Alaska does not require attorney-general notice for private-entity breaches.

← All jurisdictions

AK · data breach notification

Alaska

med

Alaska Stat. §45.48.010 et seq.

Individual deadline

No fixed limit

Trigger standard

Risk of harm

AG / regulator

Not required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	after appropriate investigation, notice unless no reasonable likelihood of harm (written determination retained 5 years)
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	Not required for private-entity breaches.
Credit reporting agencies	Notify CRAs above 1,000 residents.
Substitute notice	Available if cost exceeds $150,000 or more than 500,000 affected.
Private right of action	Yes.
Penalties	Up to $500 per resident, capped at $50,000; limited private action

Rule last verified July 18, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a Alaska breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →