Kentucky Data Protection Act: What Businesses Need to Know
Lexology May 30, 2024
On April 4, 2024, Kentucky became the fifteenth state to enact a comprehensive data privacy law, with Governor Andy Beshear signing the Kentucky Consumer Data Protection Act (KCDPA) into law. The Kentucky law will go into effect on January 1, 2026. This makes Kentucky the third state in 2024 to enact such a law, following New Jersey and New Hampshire.
Among the roster of current state privacy laws, the KCDPA appears most similar to Virginia’s Consumer Data Protection Act (VCDPA) and the Connecticut Data Privacy Act (CTDPA), as opposed to the more unique California Consumer Privacy Act (CCPA) or the more business-friendly Utah Consumer Privacy Act (UCPA) and Iowa Consumer Data Protection Act (ICPA).
Key Provisions
- Controller Requirements –...