HB 263 Alabama House · 2026 Regular Session

Biological and neural data of individuals; certain disclosures, transfers, and use by a health and fitness app prohibited without express consent, Attorney General authorized to enforce, civil penalties provided

HB 263 prohibits Alabama businesses and organizations (covered entities) from sharing or using consumers' biological data (like genetic or physiological information) or neural data (nervous system measurements) without the consumer's specific, prior written consent. It requires entities to notify consumers before any data transfer or use and allows consumers to block such actions. The Attorney General's Consumer Interest Division can enforce the law, imposing $3,000 civil penalties per violation for non-compliance. This bill directly affects Alabama residents whose data is handled by companies in sectors like health tech, fitness trackers, or medical services.

Issues: ✓ Healthcare ✓ Technology

Bill status passed 3 of 5 stages cleared

Introduction

Jan 2026

Committee Review

Mar 2026

House Passage

Feb 2026

Senate Passage

Governor

Introduced Jan 15, 2026 Last action Mar 11, 2026

Maddy AI version diff · 1 comparison

What changed between versions

Introduced → Engrossed · 7 edits · Feb 26, 2026

MODERATE

The bill was narrowed from a broad consumer protection law to specifically target health and fitness applications. This change limits the law's reach, removes general penalties for violations, and adds specific exemptions for law enforcement and genetic testing companies.

Scope change

The bill's scope was significantly narrowed. It no longer applies to all entities handling biological data but is now restricted strictly to the owners or operators of health and fitness applications.

SCOPE

The definition of 'covered entity' was changed from any entity maintaining biological data to specifically the owner or operator of a health and fitness application.

DEFINITION

New definitions were added for 'Third Party' and 'Processor' to clarify who is excluded from the law's restrictions.

The definition of 'Biological Data' was slightly altered to remove the phrase 'intended to be used for identification purposes' regarding bodily functions.

The definition of 'Neural Data' was narrowed to specifically refer to the central nervous system, removing the mention of the peripheral nervous system.

ENFORCEMENT

The provision allowing consumers to report violations directly to the Attorney General and the automatic right to seek civil penalties was removed.

Enforcement was changed to require the Attorney General to issue a 45-day notice of violation before taking legal action, removing the immediate right to sue for penalties.

REQUIREMENT

New exemptions were added, excluding law enforcement activities, court orders, and compliant genetic testing companies from the bill's restrictions.

Floor votes

How they voted

This bill passed the House by voice vote (no roll call recorded).

Full legislative history

Actions timeline

Total actions

Key actions

Committee

Amendments

Mar 11, 2026

Upper · Passed

Reported Out of Committee Second House

upper

Feb 26, 2026

Upper · Passed

Pending Committee Action in Second House (Judiciary)

upper

Feb 26, 2026

Lower · Passed

Motion to Read a Third Time and Pass as Amended - Adopted Roll Call 650

lower

Feb 26, 2026

Lower · Passed

Motion to Adopt - Adopted Roll Call 649

lower

Feb 26, 2026

Introduced

Robbins 1st Amendment Offered

lower

Feb 26, 2026

Lower · Passed

Motion to Adopt - Adopted Roll Call 648

lower

Feb 26, 2026

Introduced

Judiciary 1st Substitute Offered (Judiciary)

lower

Feb 18, 2026

Lower · Passed

Reported Out of Committee House of Origin

lower

Jan 15, 2026

Lower · Passed

Pending Committee Action in House of Origin (Judiciary)

lower

1 primary · 0 co-sponsors