Lexology April 16, 2024
On April 4, 2024, Kentucky joined the rapidly growing number of states adopting a comprehensive data privacy law, when Governor Andy Beshear signed, the Kentucky Consumer Data Protection Act (“Kentucky CDPA”). The law will take effect January 1, 2026.
In this latest in our series of articles on US State Data Privacy Laws, we summarize the key components of the Kentucky CDPA.
To whom does the Kentucky CDPA apply?
Kentucky’s law imposes obligations on “controllers” – individuals or legal entities that determine the purpose and means of processing personal data – who either conduct business in the Commonwealth of Kentucky or produce products or services targeted to residents of Kentucky and who, within the calendar year, either:
- Control or...