Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
AI Summary
This bill mandates private entities to establish retention schedules for biometric data and prohibits unauthorized collection and disclosure with exceptions.
Business Impact
If you collect biometric data in Kentucky, you must create a retention and destruction schedule or face penalties.
What do these statuses mean? ▼
Introduced
— Filed in the legislature; not yet heard in committee
In Committee
— Assigned to and being reviewed by a legislative committee
Passed
— Approved by one or both chambers; awaiting further action
Signed / Enacted
— Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed
— Vetoed, failed to pass, or session expired without action
Unknown
— Status data not yet available or awaiting classification
Affected Industries
What This Means
Kentucky's SB278 aims to regulate biometric data collection by requiring private entities to develop retention schedules and prohibiting unauthorized practices. The legislation reflects growing concerns about privacy and data security in the age of advanced technology.
Key Provisions
- Private entities must develop a retention and destruction schedule for biometric data.
- Prohibits unauthorized collection, trade, and disclosure of biometric information with exceptions.
- Establishes a standard of care for entities collecting biometric information.
Latest Legislative Action
became law without Governor's Signature (Acts Ch. 60)
Compliance Checklist
Develop a retention and destruction schedule for biometric data
Who: Private entities collecting biometric data
Penalty: Potential fines for non-compliance
Who: Private entities collecting biometric data
Penalty: Potential fines for non-compliance
Ensure no unauthorized collection or disclosure of biometric information
Who: Private entities collecting biometric data
Penalty: Potential fines for non-compliance
Who: Private entities collecting biometric data
Penalty: Potential fines for non-compliance
Related & Companion Bills
Full Legal Analysis
SB278 introduces a framework for the collection and management of biometric data in Kentucky. It requires private entities to create and adhere to a retention and destruction schedule for biometric identifiers and information, ensuring that such data is not kept longer than necessary. The bill prohibits the collection, trade, and disclosure of biometric information without explicit consent, with certain exceptions. Key definitions related to biometric data are established to clarify the scope of the legislation. This bill reflects a growing trend towards stricter oversight of personal data in the context of emerging technologies.
Official Source
Official Bill Text
View SB278 on official legislature website →
Affected Industries
More Kentucky AI Legislation
SB354
AN ACT relating to economic development.
High
HB626
AN ACT relating to education reporting.
High
HB32
AN ACT relating to biometric data collection practices.
High
SB280
AN ACT relating to the operation of a motor vehicle.
High
SB180
AN ACT relating to violations of privacy.
High
SB239
AN ACT relating to children.
High
View All KY Laws →
More Kentucky AI Laws
Browse all published AI bills and regulations for Kentucky.