Lexology April 16, 2024
White & Case

On April 4, 2024, Kentucky joined the rapidly growing number of states adopting a comprehensive data privacy law, when Governor Andy Beshear signed, the Kentucky Consumer Data Protection Act (“Kentucky CDPA”). The law will take effect January 1, 2026.

In this latest in our series of articles on US State Data Privacy Laws, we summarize the key components of the Kentucky CDPA.

To whom does the Kentucky CDPA apply?

Kentucky’s law imposes obligations on “controllers” – individuals or legal entities that determine the purpose and means of processing personal data – who either conduct business in the Commonwealth of Kentucky or produce products or services targeted to residents of Kentucky and who, within the calendar year, either:

  • Control or...

Today's Sponsors

LEK
ZeOmega

Today's Sponsor

LEK

 
Topics: Govt Agencies, Healthcare System, Privacy / Security, States
Privacy concerns mount as Elon Musk's Grok takes on health data
DHS intros framework for AI safety and security, in healthcare and elsewhere
Why Modern Developers Must Master The Balance Of Privacy And Functionality In Mobile Apps
Navigating Security and Privacy Challenges in Healthcare IT: A Strategic Approach
Balancing Personalized Targeting with Protecting Consumer Privacy

Share This Article