This bill establishes consumer rights regarding personal data, including rights to access, delete, and opt out of data processing.
If you process consumer data in Kentucky, you must implement consumer rights processes by January 1, 2024, or face legal actions.
What do these statuses mean? ▼
Affected Industries
Topics
What This Means
Kentucky's SB15 aims to enhance consumer data privacy by granting rights to confirm data processing, delete personal data, and opt out of targeted advertising. It mandates data controllers to establish an appeal process and conduct data protection assessments. The bill also empowers the Attorney General to enforce these rights, creating significant compliance obligations for businesses handling consumer data.
Key Provisions
- Establishes consumer rights to confirm data processing and delete personal data.
- Requires data controllers to create an appeal process for denied requests.
- Mandates data protection impact assessments for data controllers.
- Grants exclusive enforcement authority to the Attorney General.
- Creates a consumer privacy fund administered by the State Treasurer.
- Amends KRS 367.240 to conform with the new provisions.
Latest Legislative Action
to Economic Development, Tourism, & Labor (S)
Bill Sponsors
| Name | Role | District |
|---|---|---|
| Whitney Westerfield R | Sponsor | SD-003 |
| Ralph Alvarado R | Sponsor | SD-028 |
| John Schickel R | Sponsor | SD-011 |
Compliance Checklist
Who: Data controllers processing consumer data.
Deadline: By January 1, 2024.
Penalty: Legal actions for non-compliance.
Who: Data controllers.
Deadline: By January 1, 2024.
Penalty: Legal actions for non-compliance.
Full Legal Analysis
Full Analysis for Subscribers
Get the complete legal breakdown, compliance checklist, enforcement timeline, and expert commentary on SB15.
Unlock Full Analysis →Official Source
Related Topics
Affected Industries
More Kentucky AI Legislation
More Kentucky AI Laws
Browse all AI bills and regulations tracked for Kentucky.