Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again
KY SB278

KY SB278: AN ACT relating to biometric data collection practices. Verified

Sign in to follow

Get emailed when this bill changes status, is amended, or advances.

Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation. Read full disclaimer →
AI Summary

This bill mandates private entities to establish retention schedules for biometric data and prohibits unauthorized collection and disclosure with exceptions.

Business Impact

If you collect biometric data in Kentucky, you must create a retention and destruction schedule or face penalties.

State
Kentucky
Bill Number
SB278
Status
Introduced
Risk Level
Medium
Category
Comprehensive
Last Action
Feb 25, 2021
Last Verified
May 1, 2026
Data Updated
May 1, 2026
What do these statuses mean?
Introduced — Filed in the legislature; not yet heard in committee
In Committee — Assigned to and being reviewed by a legislative committee
Passed — Approved by one or both chambers; awaiting further action
Signed / Enacted — Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed — Vetoed, failed to pass, or session expired without action
Unknown — Status data not yet available or awaiting classification

Affected Industries

Security Healthcare Technology Retail Consumer Protection Data Privacy Biometric Technology

What This Means

Kentucky's SB278 aims to regulate biometric data collection by requiring private entities to develop retention schedules and prohibiting unauthorized practices. The legislation reflects growing concerns about privacy and data security in the age of advanced technology.

Key Provisions

Latest Legislative Action

to Economic Development, Tourism, & Labor (S)

Bill Sponsors (showing 5 of 15)

Name Role
Primary
Primary
Primary
Primary
Primary

Compliance Checklist

Develop a retention and destruction schedule for biometric data
Who: Private entities collecting biometric data
Penalty: Potential fines for non-compliance
Ensure no unauthorized collection or disclosure of biometric information
Who: Private entities collecting biometric data
Penalty: Potential fines for non-compliance

Related & Companion Bills

Kentucky HB32 — AN ACT relating to biometric data collection practices. Kentucky HB483 — AN ACT relating to biometric data. Kentucky HB626 — AN ACT relating to biometric identification.

Full Legal Analysis

SB278 introduces a framework for the collection and management of biometric data in Kentucky. It requires private entities to create and adhere to a retention and destruction schedule for biometric identifiers and information, ensuring that such data is not kept longer than necessary. The bill prohibits the collection, trade, and disclosure of biometric information without explicit consent, with certain exceptions. Key definitions related to biometric data are established to clarify the scope of the legislation. This bill reflects a growing trend towards stricter oversight of personal data in the context of emerging technologies.

Official Source


More Kentucky AI Legislation

View All KY Laws →

More Kentucky AI Laws

Browse all published AI bills and regulations for Kentucky.

View KY Laws →

Stay Updated on AI Laws

New AI laws, compliance deadlines, and plain-English breakdowns. Updated daily.

Unsubscribe anytime.
You're subscribed. Check your inbox.
Report an error in this data