Lexology April 16, 2024
White & Case

On April 4, 2024, Kentucky joined the rapidly growing number of states adopting a comprehensive data privacy law, when Governor Andy Beshear signed, the Kentucky Consumer Data Protection Act (“Kentucky CDPA”). The law will take effect January 1, 2026.

In this latest in our series of articles on US State Data Privacy Laws, we summarize the key components of the Kentucky CDPA.

To whom does the Kentucky CDPA apply?

Kentucky’s law imposes obligations on “controllers” – individuals or legal entities that determine the purpose and means of processing personal data – who either conduct business in the Commonwealth of Kentucky or produce products or services targeted to residents of Kentucky and who, within the calendar year, either:

  • Control or...

Today's Sponsors

LEK
ZeOmega

Today's Sponsor

LEK

 
Topics: Govt Agencies, Healthcare System, Privacy / Security, States
Biden Administration Finalizes Rule To Support Reproductive Health Care Privacy
Health care must learn from consumers to grow: McKinsey report
Altman handpicked for Homeland Security's AI safety board
The Balance Between Digital Transformation and Regulatory Compliance for Patient Security
Nuanced Privacy Laws Means Healthcare Organizations Should Prioritize Protecting Personal Information

Share This Article