Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again
KY SB15

KY SB15: AN ACT relating to consumer data privacy. Verified

Sign in to follow

Get emailed when this bill changes status, is amended, or advances.

Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation. Read full disclaimer →
AI Summary

This bill creates consumer rights regarding personal data, including rights to access, delete, and opt out of data processing and sales, and establishes a consumer privacy fund.

Business Impact

If you handle consumer data in Kentucky, you must implement an appeal process for data requests by January 1, 2024, or face enforcement actions.

State
Kentucky
Bill Number
SB15
Status
Introduced
Risk Level
High
Category
Comprehensive
Effective Date
Jan 1, 2024
Last Action
Jan 18, 2022
Last Verified
May 1, 2026
Data Updated
May 1, 2026
Version
v3
What do these statuses mean?
Introduced — Filed in the legislature; not yet heard in committee
In Committee — Assigned to and being reviewed by a legislative committee
Passed — Approved by one or both chambers; awaiting further action
Signed / Enacted — Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed — Vetoed, failed to pass, or session expired without action
Unknown — Status data not yet available or awaiting classification

Affected Industries

Advertising Consumer Protection Technology Data Processing Marketing E-commerce

Topics How we classify →

What This Means

Kentucky's SB15 aims to enhance consumer data privacy by establishing rights for individuals regarding their personal data. It mandates that data controllers allow consumers to confirm data processing, delete their data, and opt out of targeted advertising. The bill also requires data protection impact assessments, sets up a consumer privacy fund in the state treasury, and establishes an enforcement mechanism through the Attorney General, with a private right of action for injunctive relief.

Key Provisions

Latest Legislative Action

to Economic Development, Tourism, & Labor (S)

Bill Sponsors (showing 5 of 18)

Name Role
Primary
Primary
Primary
Primary
Primary

Compliance Checklist

Establish an appeal process for consumer data requests
Who: Data controllers
Deadline: By January 1, 2024
Penalty: Enforcement actions by the Attorney General
Conduct data protection impact assessments
Who: Data controllers
Deadline: By January 1, 2024
Penalty: Enforcement actions by the Attorney General

Related & Companion Bills

Kentucky HB15 — AN ACT relating to consumer data privacy and making an appr…

Full Legal Analysis

SB15 introduces new sections to KRS Chapter 367, focusing on consumer rights related to personal data. Key requirements include the rights for consumers to confirm whether their data is being processed, to delete their data, and to obtain copies of their data. Additionally, consumers can opt out of targeted advertising and the sale of their data. Data controllers must establish an appeal process for consumers to contest refusals regarding their requests. The bill mandates data protection impact assessments for data controllers and grants exclusive enforcement authority to the Attorney General, with a provision for consumers to seek injunctive relief for specific violations. It also establishes a consumer privacy fund in the state treasury. The effective date for compliance is set for January 1, 2024, which necessitates prompt action from businesses handling consumer data in Kentucky.

Official Source


More Kentucky AI Legislation

View All KY Laws →

More Kentucky AI Laws

Browse all published AI bills and regulations for Kentucky.

View KY Laws →

Stay Updated on AI Laws

New AI laws, compliance deadlines, and plain-English breakdowns. Updated daily.

Unsubscribe anytime.
You're subscribed. Check your inbox.
Report an error in this data