Burns Media Intelligence for Professionals
Section II · Policy

Alabama's New Privacy Law Signals State-Level Shift

Alabama has enacted the Alabama Personal Data Protection Act, following Oklahoma's lead in 2026. This new law introduces significant changes to data privacy regulations in the state.

Top Stories

The morning’s intelligence.

Alabama Enacts Comprehensive Privacy Law

On April 17, 2026, Alabama's Governor signed HB 351 into law, establishing the Alabama Personal Data Protection Act (ALDPA). This law is similar to Connecticut's privacy statute but omits certain requirements like data protection impact assessments, impacting businesses handling personal data in Alabama.

Why it matters. This law is similar to Connecticut's privacy statute but omits certain requirements like data protection impact assessments, impacting businesses handling personal data in Alabama.

Our readExpect compliance challenges for businesses as Alabama's law mirrors but deviates from other state regulations.

Source · InsidePrivacy (Covington)

FTC Alleges OkCupid Data Sharing Amounted to a Deceptive Practice

The FTC settled with OkCupid and Match Group Americas over deceptive data sharing practices, alleging violations of Section 5 of the FTC Act. The agency claims OkCupid shared personal information without proper disclosure, raising concerns about user privacy and consent.

Why it matters. The agency claims OkCupid shared personal information without proper disclosure, raising concerns about user privacy and consent.

Our readThe FTC's aggressive stance on data privacy violations suggests that other apps may face similar scrutiny.

Source · InsidePrivacy (Covington)

Weaponized deepfakes

The proliferation of deepfake technology poses significant risks as it becomes easier to create convincing fake videos and audio. These tools can be weaponized for misinformation campaigns, fraud, and identity theft, raising alarms among regulators and cybersecurity experts.

Why it matters. These tools can be weaponized for misinformation campaigns, fraud, and identity theft, raising alarms among regulators and cybersecurity experts.

Our readPrepare for increased regulatory scrutiny as deepfakes become a prevalent tool for malicious actors.

Source · MIT Tech Review AI

Court Orders Operator of Timeshare Exit Scheme to Pay $140 Million

A federal court has ordered a key operator of a timeshare exit scheme to pay $140 million due to FTC allegations of defrauding consumers, primarily targeting older adults. The ruling permanently bans the operator from marketing similar services in the future.

Why it matters. The ruling permanently bans the operator from marketing similar services in the future.

Our readExpect the FTC to continue aggressive enforcement actions against fraudulent schemes targeting consumers as it seeks to deter similar operations.

Source · FTC Press Releases

Quick Hits

Also on the desk.

Monitor developments in Alabama's data privacy landscape as more states may follow suit with similar legislation.

← Back to the AI Governance Daily archive