Ala. Code § 27-62-9 (1975) Exceptions

• Library: Alabama Statutes
• Edition: 2023
• Currency: Current with legislation from the 2023 Regular and Special Sessions.

(a) The following exceptions shall apply to this chapter:

(1) A licensee is exempt from Section 27-62-4 if any of the following criteria apply:

a. The licensee has fewer than 25 employees.

b. The licensee has less than $5 million in gross annual revenue.

c. The license has less than $10 million in year-end total assets.

(2) A licensee subject to Pub.L. 104-191, 110 Stat. 1936, enacted August 21, 1996 (Health Insurance Portability and Accountability Act), that has established and maintains an information security program pursuant to the statutes, rules, regulations, procedures, or guidelines established thereunder, shall be considered to meet the requirements of this chapter, provided that licensee is compliant with and submits a written statement certifying its compliance with Pub. L. 104-191.

(3) An employee, agent, representative, or designee of a licensee who is also a licensee is exempt from this chapter and is not required to develop its own information security program to the extent that the employee, agent, representative, or designee is covered by the information security program of the other licensee.