Alaska

For both government agencies, violations of the Alaska data breach notification statute can result in civil penalties to the state of up to $500 for each state resident that was not notified, and the total penalty may not exceed $50,000. Id. at §45.480.080(a). An information collector who is not a government agency and who violates the data breach notification statutes, is considered in violation of the unfair and deceptive practice under Alaska Stat. §§ 45.50.471-561. Id. at §45.480.080(b). Additionally, the private information collector is liable to the state up to $500 for each state resident that was not notified, and the total penalty may not exceed $50,000. Id. Affected persons may also bring a cause of action against the private information collector under Alaska Stat. §§ 45.50.531 and 537, but may not exceed an award of $500. Id.
The Department of Administration is responsible for bringing enforcement action against government agencies that violate the notification statute. Id. at §45.480.080(c). For private parties that violate the statute, the Consumer Protection Unit of the Attorney General’s Office is responsible for investigating breaches and filing legal actions.