Kentucky Consumer Data Protection Act

Kentucky's comprehensive consumer privacy law gives Kentucky residents rights to confirm, access, correct, delete, and port their personal data and to opt out of targeted advertising, sale, and significant-decision profiling. Controllers must minimize collection, secure data, obtain consent before processing sensitive data, publish a privacy notice, and conduct data protection impact assessments for higher-risk processing. A 2026 amendment (effective July 1, 2027) bars collection of smart-TV and smart-monitor automatic content recognition data without consent.