Kentucky Consumer Data Protection Act (HB 15, 2024)
Kentucky · 2024 Ky. Acts (HB 15); KRS ch. 367
Kentucky's privacy law took effect January 1, 2026, giving residents rights to access, correct, delete, and copy their personal data, and to opt out of data sales and targeted advertising. Businesses need opt-in consent for sensitive data including biometrics.
Technical detail
KY HB 15 (2024), eff. Jan. 1, 2026; VCDPA-modeled; 100,000-consumer or 25,000/50%-revenue thresholds; data protection assessments required from June 1, 2026; AG-exclusive enforcement, 30-day cure, up to $7,500 per continued violation.
Who is protected: Kentucky consumers
Who must comply: Controllers/processors meeting thresholds doing business in or targeting Kentucky
Key facts
| Jurisdiction | Kentucky |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2026-01-01 |
| Enacted | 2024-04-04 |
| Citation | 2024 Ky. Acts (HB 15); KRS ch. 367 |
| Enforced by | Kentucky Attorney General (exclusive) |
| Private right of action | No — agency enforcement only |
| Penalties | Up to $7,500 per continued violation after 30-day cure |
| Topics | consumer data privacy · consumer protection · automated decision-making · data retention |
| Last verified | 2026-06-12 |
| Official source | 24RS HB 15 — Kentucky Legislature ↗ |
More AI rules in Kentucky
- Kentucky SB 4 (AI Governance) · In effect
- Kentucky HB 207 (computer-generated CSAM) · In effect
- Commonwealth Office of Technology Enterprise Policy CIO-126: · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.