Lexology April 16, 2024
White & Case

On April 4, 2024, Kentucky joined the rapidly growing number of states adopting a comprehensive data privacy law, when Governor Andy Beshear signed, the Kentucky Consumer Data Protection Act (“Kentucky CDPA”). The law will take effect January 1, 2026.

In this latest in our series of articles on US State Data Privacy Laws, we summarize the key components of the Kentucky CDPA.

To whom does the Kentucky CDPA apply?

Kentucky’s law imposes obligations on “controllers” – individuals or legal entities that determine the purpose and means of processing personal data – who either conduct business in the Commonwealth of Kentucky or produce products or services targeted to residents of Kentucky and who, within the calendar year, either:

  • Control or...

Today's Sponsors

Venturous
ZeOmega

Today's Sponsor

Venturous

 
Topics: Govt Agencies, Healthcare System, Privacy / Security, States
Data Privacy In A World Built To Collect Everything
Why Data Privacy Is A Strategic Imperative For Every Organization
"New Year, New You*! (* - Privacy Laws)
Updates to HIPAA Notice of Privacy Practices Required by February 16, 2026
Your Medical Privacy Could Be At Risk, A New Lawsuit Shows

Share Article