Health record rights in Alaska: what state law adds
In Alaska, as of October 3, 2026, your OK is needed before at least some businesses outside HIPAA share your health data; we found no law on faster or free copies; you can opt out of the health information exchange; reproductive health, mental health, HIV and genetic records each have a specific confidentiality rule; you can sue only in a narrow case; and breach notices need not cover medical or health insurance information. One answer is not checked yet (AI in care). Each answer below quotes, dates and links the law. There is no state total and no state rank.
Laws read · page updated
Not legal advice. This records what the law said on the date we read it. Laws and court orders change. Read the law itself, or ask a lawyer, before you rely on it. State laws add to the federal floor. The national score rates federal law and national infrastructure and does not change with these state profiles.
Can you sue if your records are misused?Only in a narrow case, such as a data breach or one kind of record. The laws below say which. Same answer in 31 of the 50 states, counting this one.
Federal law, mainly HIPAA, applies in every state; our US page explains it in plain English. Each answer below says what this state adds on top, with the law's name, citation, effective date, the words that matter and a link to the official page.
Do apps and wearables need your OK before sharing health data?
Federal floor: HIPAA does not cover most apps, wearables, websites or data brokers.
Yes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Level rests only on AS 18.13, which requires written consent for DNA data held by any person. No comprehensive privacy or consumer health data law found. HB 367 (2026) died in committee.
"Level" is the step on our rulebook's scale for this question. 0 means nothing beyond HIPAA. Higher means the law gives you more here.
Genetic privacy: genetic testing. AS 18.13.010(a)(1)
In force · effective · read October 3, 2026 · source(akleg.gov)
a person may not collect a DNA sample from a person, perform a DNA analysis on a sample, retain a DNA sample or the results of a DNA analysis, or disclose the results of a DNA analysis unless the person has first obtained the informed and written consent
Who it binds, in our words: "a person"; exceptions in AS 18.13.010(b) for law enforcement, paternity, newborn screening and emergency medical treatment
Second check by a separate agent: disputed, then settled by a ruling drafted by an agent against the law's text and approved by the authors on October 3, 2026.
Do you get a copy faster or free in some cases?
Federal floor: HIPAA gives the provider 30 days, plus one 30-day extension, and allows a cost-based fee. We also count the federal information blocking rule (45 CFR Part 171).
No law found We searched the official code and found none.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
AS 18.23.005 gives a right to inspect and copy, with no deadline or fee terms. 12 AAC 40.967(11) sets 30 days for physicians, equal to HIPAA. No free copy case found. AS 40.25.121 covers public records for veterans, not health records.
Goes beyond the federal floor: no.
How we searched (October 3, 2026): the official code search for records "without charge" patient, "medical records" copy. Agency pages checked: akleg.gov.
Second check by a separate agent: confirmed.
Can you say no to sharing through a health information exchange (a network that passes records between doctors)?
Federal floor: HIPAA lets providers share records for treatment without asking you.
Opt-out. Your records go through the exchange unless you say no, and there is a published way to say no.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Statute requires an opt-out procedure. The health department names healthEconnect Alaska as the state HIE. Its FAQ effective date is the page's last-modified date. SUD/MAT data is opt-in by HIE policy.
Set by state law.
Designated exchange: healthEconnect Alaska.
Some sensitive records need your consent even where routine records do not.
Health information exchange: confidentiality and security of information. AS 18.23.310(c), as amended by ch. 19 SLA 2026 (SB 272)
In force · effective · read October 3, 2026 · source(akleg.gov)
The designee shall establish procedures for a patient who is the subject of a health record contained in the system (1) to opt out of the system;
Who it binds, in our words: The statewide electronic health information exchange system established under AS 18.23.300
In force · effective · read October 3, 2026 · source(healtheconnectak.org, reached from health.alaska.gov)
SUD/MAT data sharing is voluntary and opt-in only.
Who it binds, in our words: Substance use disorder and medication assisted treatment data shared through healthEconnect Alaska
Second check by a separate agent: disputed, then settled by a ruling drafted by an agent against the law's text and approved by the authors on October 3, 2026.
Are some sensitive records, like mental health or HIV, given extra rules?
These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available.
Reproductive health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Rule covers reports to the state registrar, not the clinical record. Date is ch. 141 SLA 2002 (HB 160). A later amendment to subsection (e) was not dated.
Report of induced termination of pregnancy. AS 18.50.245(a), (d)
In force · effective · read October 3, 2026 · source(akleg.gov)
The report may not contain the name of the patient whose pregnancy was terminated but must contain the information required by the state registrar in regulations adopted under this section.
Who it binds, in our words: Hospitals, clinics, other institutions and physicians that report to the state registrar
Second check by a separate agent: confirmed.
Mental health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Disclosure is limited to listed recipients, including the patient or a person with the patient's written consent. Effective date from sec. 69 of ch. 11 SLA 2024.
Confidential records (mental health commitment and treatment). AS 47.30.845, as amended by ch. 11 SLA 2024 (HB 66), sec. 59
In force · effective · read October 3, 2026 · source(akleg.gov)
Information and records obtained in the course of a screening investigation, evaluation, examination, or treatment are confidential and are not public records
Who it binds, in our words: Records under AS 47.30.660 to 47.30.915 (evaluation, commitment and treatment)
Second check by a separate agent: confirmed.
HIV records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Rule covers court-ordered HIV tests in sex offense cases only. Date is ch. 1 SLA 1994 (HB 109). A later amendment to subsection (a) was not dated.
Blood tests of persons charged with sex offenses: testing; test results. AS 18.15.310(e)
In force · effective · read October 3, 2026 · source(akleg.gov)
to maintain the confidentiality of personal identifying data relating to the test results except for disclosures by the victim
Who it binds, in our words: HIV and STD test results from court-ordered tests under AS 18.15.300 to 18.15.320
Second check by a separate agent: confirmed.
Genetic records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Enacted by ch. 176 SLA 2004 (SB 217). A general medical records release is not consent under AS 18.13.010(c).
Genetic privacy: genetic testing. AS 18.13.010(a)(1)
In force · effective · read October 3, 2026 · source(akleg.gov)
a person may not collect a DNA sample from a person, perform a DNA analysis on a sample, retain a DNA sample or the results of a DNA analysis, or disclose the results of a DNA analysis unless the person has first obtained the informed and written consent
Who it binds, in our words: "a person"; exceptions in AS 18.13.010(b)
Second check by a separate agent: confirmed.
Can you sue if your records are misused?
Only in a narrow case, such as a data breach or one kind of record. The laws below say which.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Narrow right for genetic data only. Breach violations by businesses are unfair trade practices under AS 45.48.080(b), with damages capped at $500 actual economic damages. No general medical records right found.
Damages a court may award: Actual damages plus $5,000, or $100,000 if the violation resulted in profit or monetary gain (AS 18.13.020)
Genetic privacy: private right of action. AS 18.13.020
In force · effective · read October 3, 2026 · source(akleg.gov)
A person may bring a civil action against a person who collects a DNA sample from the person, performs a DNA analysis on a sample, retains a DNA sample or the results of a DNA analysis, or discloses the results of a DNA analysis in violation of this chapter.
Who it binds, in our words: Violations of AS 18.13 (DNA samples and analysis)
Second check by a separate agent: confirmed.
Must you be told if health data leaks in a breach?
No. The breach notice law covers neither medical nor health insurance information.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Elements are SSN, license or ID number, account and card numbers, and access codes. No medical or health insurance element. The AG gets notice only when no-harm is determined (AS 45.48.010(c)). Enacted by ch. 92 SLA 2008.
Deadline to tell people: in the most expeditious time possible and without unreasonable delay.
No duty found to tell the attorney general or a regulator.
Alaska Personal Information Protection Act: definitions. AS 45.48.090(7)
In force · effective · read October 3, 2026 · source(akleg.gov)
the individual's social security number; (ii) the individual's driver's license number or state identification card number;
Who it binds, in our words: "covered person" means a (A) person doing business; (B) governmental agency; or (C) person with more than 10 employees
Disclosure of breach of security. AS 45.48.010(b)
In force · effective · read October 3, 2026 · source(akleg.gov)
in the most expeditious time possible and without unreasonable delay, except
Who it binds, in our words: Information collectors that own or license personal information on a state resident
Second check by a separate agent: confirmed.
Are there rules for AI used in your care?
The three rules we look for: you must be told when AI is used in your care; a licensed clinician decides, not AI alone; you can reach a human, or have a human review the decision. Each counts only if the law names health care or health coverage.
Not checked We did not finish the research on this question here, so this is not a no.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
The statute search returned no section using "artificial intelligence". SB 133 (2025) sets prior authorization deadlines but does not mention AI.
Second check by a separate agent: disputed, then settled by the authors on October 3, 2026.
Rights in practice: the setting
These public figures describe conditions that can affect whether people are able to use the rights above, such as health insurance and internet at home. They are not scored, not part of any answer, and not a reason for any answer. Each is the latest the source publishes for the state, checked against the publisher (the Census Bureau or the Bureau of Labor Statistics); grouped under the Healthy People 2030 social determinants of health.
Source and period on every row. Figures from DataSpine, each checked against its publisher. Not scored.
Figure
Value
Source and period
People under 65 without health insuranceHealth care access and quality
12.5%
Small Area Health Insurance Estimates, SAHIE 2024 (single-year model estimate)
Households with a computerHealth care access and quality
96.1%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a broadband internet subscriptionHealth care access and quality
89.4%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a smartphone and no other computerHealth care access and quality
9.5%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Median household incomeEconomic stability
$86,370 (2022 dollars)
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Unemployment rateEconomic stability
4.8%
Local Area Unemployment Statistics, December 2025, monthly, seasonally adjusted
Households without a vehicleNeighborhood and built environment
9.1%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
People who speak a language other than English at homeSocial and community context
15.7%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households of one person aged 65 or overSocial and community context
9.2%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Not shown: the number of people below the poverty line and the number with a bachelor's degree, which are available only as counts, and counts do not compare across states of different size.
Not shown yet, with no checked state figure: Medicare members who also have Medicaid; Medicaid enrollment; primary care supply; social vulnerability, income and jobs; people in nonmetro counties; social vulnerability, housing and transport; social vulnerability, household and minority themes.
Also recorded: a data broker registry
A fact, not part of any answer above. No law found We found no data broker registry law.
Another state
This study covers the 50 states and Washington, DC. It does not cover the US territories (Puerto Rico, Guam, the US Virgin Islands, the Northern Mariana Islands and American Samoa).
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research by AI agents built on Anthropic's Claude, checked by a second agent and ruled by the authors; how we did it. Research tool, not legal advice. Text CC BY 4.0.
