(a) When disposing of records that contain personal information, a business and a governmental agency shall take all reasonable measures necessary to protect against unauthorized access to or use of the records. (b) Notwithstanding (a) of this section, if a business or governmental agency has otherwise complied with the provisions of AS 45.48.500 – 45.48.590 […]
The measures that may be taken to comply with AS 45.48.500 include (1) implementing and monitoring compliance with policies and procedures that require the burning, pulverizing, or shredding of paper documents containing personal information so that the personal information cannot practicably be read or reconstructed; (2) implementing and monitoring compliance with policies and procedures that […]
In AS 45.48.510(3), due diligence ordinarily includes performing one or more of the following: (1) reviewing an independent audit of the third party’s operations and its compliance with AS 45.48.500 – 45.48.590; (2) obtaining information about the third party from several references or other reliable sources and requiring that the third party be certified by […]
A business or governmental agency shall adopt written policies and procedures that relate to the adequate destruction and proper disposal of records containing personal information and that are consistent with AS 45.48.500 – 45.48.590.
(a) A business or a governmental agency is not required to comply with AS 45.48.500 – 45.48.530 if federal law requires that the business or governmental agency act in a way that does not comply with AS 45.48.500 – 45.48.530. (b) A business is not required to comply with AS 45.48.500 – 45.48.530 if (1) […]
(a) An individual, a business, or a governmental agency that knowingly violates AS 45.48.500 – 45.48.590 is liable to the state for a civil penalty not to exceed $3,000. (b) In this section, “knowingly” has the meaning given in AS 11.81.900.
An individual who is damaged by a violation of AS 45.48.500 – 45.48.590 may bring a civil action in court to enjoin further violations and to recover for the violation actual economic damages, court costs allowed by the rules of court, and full reasonable attorney fees.
In AS 45.48.500 – 45.48.590, (1) “business” means a person who conducts business in the state or a person who conducts business and maintains or otherwise possesses personal information on state residents; in this paragraph, (A) “conducts business” includes engaging in activities as a financial institution organized, chartered, or holding a license or authorization certificate […]
