The bill establishes consumer rights regarding personal data, including access, correction, deletion, and opting out of data sales.
If you process consumer data in Kentucky, you must ensure compliance with consumer rights by January 1, 2026, or face enforcement actions.
What do these statuses mean? ▼
Affected Industries
Topics How we classify →
What This Means
Kentucky's HB15, the Kentucky Consumer Data Protection Act, introduces significant consumer rights regarding personal data. It mandates that businesses confirm data processing, correct inaccuracies, delete data, and allow consumers to opt out of targeted advertising. The Attorney General will enforce these rights, creating a structured framework for data privacy in the state.
Key Provisions
- Establishes consumer rights regarding personal data processing.
- Allows consumers to confirm, correct, delete, and obtain copies of their data.
- Enables consumers to opt out of targeted advertising and data sales.
- Designates the Attorney General as the exclusive enforcer of consumer data rights.
- Creates a consumer privacy fund administered by the Attorney General's office.
- Exempts certain entities from the provisions of the Act.
Latest Legislative Action
signed by Governor (Acts Ch. 72)
Bill Sponsors (showing 5 of 52)
| Name | Role |
|---|---|
| A. Scott | Primary |
| A. Tackett Laferty | Primary |
| B. Chester-Burton | Primary |
| B. McCool | Primary |
| B. Wesley | Primary |
Amendments (3)
Compliance Checklist
Who: Businesses processing consumer data.
Deadline: By January 1, 2026.
Penalty: Enforcement actions by the Attorney General.
Who: Businesses processing consumer data.
Deadline: By January 1, 2026.
Penalty: Enforcement actions by the Attorney General.
Related & Companion Bills
Full Legal Analysis
Official Source
Related Topics
Affected Industries
More Kentucky AI Legislation
More Kentucky AI Laws
Browse all published AI bills and regulations for Kentucky.